Is it possible to use AWS WAF to block users behind a NAT

Question

I am trying to place AWS WAF behind a NAT gateway to block some specific users. The image below explains it all.

Thank you guys.