Amazon CloudFront publishes a dedicated JSON endpoint of global and regional edge IP ranges, separate from the full AWS ip-ranges.json. Use this for origin-firewall allowlisting of CloudFront edge traffic.
Autonomous systems (ASNs)
Known ASNs used by Amazon CloudFront.
AS16509
AS14618