CloudFront S3 origin returned 403 for CORS preflight and the bucket policy change that allowed OPTIONS requests
When deploying a web application that integrates with assets hosted on Amazon S3 and distributed via Amazon CloudFront, developers commonly run into Cross-Origin Resource Sharing (CORS) issues—particularly with preflight OPTIONS requests. One particularly frustrating error is the 403 Forbidden response that CloudFront returns when a CORS preflight request to an S3 origin is not properly […]
