Using AWS WAF with CloudFront to block requests by User-Agent, IP range, referrer, and other criteria.

See the comparison table for pricing notes.

This remains untested.