Ensure that geo-restriction feature is enabled for your CloudFront distribution to allow or block location-based access.
AWS CloudFront geo restriction feature can be used to assist in mitigation of Distributed Denial of Service (DDoS) attacks.
Enable CloudFront geo restriction to whitelist or block location-based access.