diff --git a/cloudfront-ips.txt b/cloudfront-ips.txt
new file mode 100644
index 0000000..7cc4c51
--- /dev/null
+++ b/cloudfront-ips.txt
@@ -0,0 +1,85 @@
+108.138.0.0/15
+108.156.0.0/14
+111.13.171.128/26
+111.13.171.192/26
+111.13.185.32/27
+111.13.185.64/27
+116.129.226.0/25
+116.129.226.128/26
+118.193.97.128/25
+118.193.97.64/26
+119.147.182.0/25
+119.147.182.128/26
+120.232.236.0/25
+120.232.236.128/26
+120.253.240.192/26
+120.253.241.160/27
+120.253.245.128/26
+120.253.245.192/27
+120.52.12.64/26
+120.52.153.192/26
+120.52.22.96/27
+120.52.39.128/27
+130.176.0.0/17
+130.176.128.0/18
+130.176.192.0/19
+130.176.224.0/20
+13.224.0.0/14
+13.249.0.0/16
+13.32.0.0/15
+13.35.0.0/16
+143.204.0.0/16
+144.220.0.0/16
+15.158.0.0/16
+180.163.57.0/25
+180.163.57.128/26
+18.154.0.0/15
+18.160.0.0/15
+18.164.0.0/15
+18.172.0.0/15
+18.238.0.0/15
+18.244.0.0/15
+18.64.0.0/14
+18.68.0.0/16
+204.246.164.0/22
+204.246.168.0/22
+204.246.172.0/24
+204.246.173.0/24
+204.246.174.0/23
+204.246.176.0/20
+205.251.200.0/21
+205.251.208.0/20
+205.251.249.0/24
+205.251.250.0/23
+205.251.252.0/23
+205.251.254.0/24
+216.137.32.0/19
+3.160.0.0/14
+36.103.232.0/25
+36.103.232.128/26
+52.124.128.0/17
+52.222.128.0/17
+52.46.0.0/18
+52.82.128.0/19
+52.84.0.0/15
+54.182.0.0/16
+54.192.0.0/16
+54.230.0.0/17
+54.230.128.0/18
+54.230.200.0/21
+54.230.208.0/20
+54.230.224.0/19
+54.239.128.0/18
+54.239.192.0/19
+54.240.128.0/18
+58.254.138.0/25
+58.254.138.128/26
+64.252.128.0/18
+64.252.64.0/18
+65.8.0.0/16
+65.9.0.0/17
+65.9.128.0/18
+70.132.0.0/18
+71.152.0.0/17
+99.84.0.0/16
+99.86.0.0/16
diff --git a/make-aws-cloudfront-range.sh b/make-aws-cloudfront-range.sh
new file mode 100755
index 0000000..9a1cfa5
--- /dev/null
+++ b/make-aws-cloudfront-range.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+curl https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips | jq -r '.CLOUDFRONT_GLOBAL_IP_LIST  | join("\n")' | sort > cloudfront-ips.txt