Hello Jason,
Blocking iCloud can be difficult as Apple does use IP addresses outside of it’s 17.0.0.0/8 range by utilizing cloud platforms like AWS and Azure. Marcus has a post here that has some articles addressing blocking iCloud.
One of the tips is blocking port 5223 as this is the port that Apple uses for it’s push notifications service. However, this will block all push notifications, including third-party apps.