We can restrict country by WAF rule, so why it has CloudFront geographic restrictions?

Hi,

You can see at least 3 different reasons for that:

• The geo-blocking features of CloudFront are also intended for legal reasons: some customers do not have legal rights to distribute some content in some regions. It can be used for that.
• WAF is another service which is paid for: some customers need minimal cost. So, CF geo-blocking can be used in that case
• WAF is more flexible than CF re. geo-blocking: in advanced rules, you can combine logically geo-blocking with other conditions on the requester. It's needed by some customer for which CF geo-blocking is then not flexible enough.

Best

Didier