Amazon S3 and Access-Control-Allow-Origin

Does Amazon S3 allow custom headers? Or am I out of luck?

Access-Control-Allow-Origin: *

Solution 1:

Amazon allows you to enable CORS for S3 bucket. See:

https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html#how-do-i-enable-cors

Solution 2:

S3 does not support the Access-Control-Allow-Origin header.

https://forums.aws.amazon.com/thread.jspa?threadID=34281