need some expert advise on how can we get PCI Vulnerability scan completed by and authorized ASV on a website's public facing IP address when it sits behind Cloudfront. CloudFront has got a huge range of public facing addresses which it assigns depending on location of the end user. AWS has an option for Anycast IP which costs $3000/month.
Has anyone come across this issue and if there is a cost effective option to get this done?