iOS (and others?), Firewall Rules and Amazon AWS

[belwig]

I block internet access for my kid's devices during certain hours of the day. However, I like to allow music playing like Spotify and Pandora.

I have a router that uses firewall rules to allow all packets, and then drop packets from their devices to the router during certain time ranges.

I then created an additional rule with a higher priority that allows traffic to the router if the destination has any of the following IP ranges:

194.68.28.0/22 (spotify)
193.182.8.0/21 (spotify)
78.31.8.0/21 (spotify)
208.85.40.0/21 (pandora)

When they connect to the app during the blackout periods, Spotify reports it is offline on their iOS devices. The Pandora app, hoever, works.

Looking at the firewall logs, I see dropped connections to the following IPs:

54.204.30.51
50.19.95.95
50.19.89.228
54.235.104.210
54.225.208.80
54.225.183.207

138.108.6.20

All are TCP packets from source ports in the 53000 range. The destination port is always 443.

The first group is Amazon Web Services. The last is AC Nielson.

Does Spotify require connections from Amazon Web services?

Any thougts on creating rules for these? I really don't want to open those IPs/ranges since they are not specific to Spotify.