Using Service Policies we can select and exclude IPs prefixes but these controls will only apply to the WAF policy defined on the Load Balancer, for now there is no way to choose which WAF policy should or should not apply.
On the other hand Routes can select which WAF policy should apply, nevertheless, these rules cannot be defined by IP prefixes, they should be defined either by header values or URI paths.