There are two methods you can use to move CWPP agents to new POPs.
To migrate CWPP agents using a helper script:
The helper script is used to create an endpoint and hosted zone in agent VPCs.
Delete the stack which is created after deploying the helper script. It deletes the resources created as part of it namely endpoint and DNS hosted zone.
Deploy the helper script with new POP details. Now the endpoint connecting to the new POP privateLink service and DNS hosted zone for the same is created.
After the next sync, all agents are managed and associated with the new POP.
To manually create an endpoint:
Manual creation of endpoint and hosted zone in agent VPCs.
Create an endpoint for the new POP privateLink services in the AWS console.
If the DNS hosted zone is already created, enter the record sets of created endpoints else create DNS hosted zone and enter the record sets of created endpoints.