AWS WAF with cloudfront

Question

I am trying to block my ip address via WAF and using cloudfront.

It should block the IP address

I need to know whether it is neccessary to change dns configuration file with the new domain name cloudfront provides ?

Answer 1

Yes, you should update your DNS cname record to the CloudFront distribution.

You will need to have the WAF apply to the CF distribution and not the ALB of the origin if you use one.