Azure Public Ip's are blocked by cloudfront

It appears that your Azure public IP is being blocked by CloudFront, which is likely due to security measures implemented by the website owner rather than AWS itself. CloudFront doesn't typically implement automatic IP blocking on its own. The blocking you're experiencing is most likely caused by AWS Web Application Firewall (WAF) rules configured by the website owner in conjunction with CloudFront.

There are a few reasons why your Azure public IP might be blocked:

1. It may be listed on one of the AWS-managed IP reputation lists used by WAF.
2. Your IP might be classified as a hosting provider IP, which some websites block to prevent traffic from data centers.
3. There could be custom WAF rules set by the website owner that are triggering on your requests.

Unfortunately, AWS support is correct in saying they can't directly help with this issue. The website owner has control over their CloudFront and WAF settings. Here are some steps you can take:

1. Try to contact the website owner or their technical team directly. They can review their WAF rules and CloudFront settings to determine why your IP is being blocked.

2. Provide the website owner with specific dates and times of your legitimate access attempts to help them investigate.

3. If possible, try using a different network or obtaining a new IP address that isn't associated with Azure or other hosting providers.

4. Ensure that your activities from the Azure IP are not triggering any security measures, such as making an unusually high number of requests in a short time.

5. If you must use the Azure IP for legitimate business purposes, you may need to work with the website owner to have your IP range allowlisted in their WAF rules.

Remember, resolving this issue will require cooperation from the website owner, as they control the security settings for their CloudFront distribution.
Sources
Request for IP Unblock - CloudFront 403 Error | AWS re:Post
Why is my IP blocked by some AWS CloudFront services? | AWS re:Post
AWS CloudFront Blocking Entire CIDR Range | AWS re:Post