Clone WAF IP Set

export.sh

# This example exports a regional rule, targeted for importing into cloudfront
aws wafv2 get-ip-set --scope REGIONAL --output=json --name=my-ip-set --id foo | jq -c '.IPSet | del(.Id,.ARN) + {Scope: "CLOUDFRONT"}' > my-ip-set.json

import.sh

# Cloudfront is always us-east-1
aws wafv2 create-ip-set --region=us-east-1  --cli-input-json file://my-ip-set.json

See WAF cli docs at https://docs.aws.amazon.com/cli/latest/reference/wafv2/get-ip-set.html and https://docs.aws.amazon.com/cli/latest/reference/wafv2/create-ip-set.html

Note: when calling create-ip-set the Description in the .json must be set, and can not be the empty string.