[Solved] A developer wrote this CORS configuration but the browser still blocks DELETE requests:{"CORSRules": [{"AllowedOrigins": ["https://app.example.com"], "AllowedMethods":... | AWS

AWS - API Gateway

A developer wrote this CORS configuration but the browser still blocks DELETE requests:

{"CORSRules": [{"AllowedOrigins": ["https://app.example.com"], "AllowedMethods": ["GET", "POST", "PUT"]}]}

What is the error?

AMaxAgeSeconds is set too low

BAllowedOrigins should be '*' instead of specific domain

CAllowedHeaders is missing

DDELETE method is missing in AllowedMethods

Step-by-Step Solution

Solution:

Step 1: Check AllowedMethods list
DELETE method is not included in AllowedMethods.
Step 2: Understand effect on DELETE requests
Without DELETE allowed, browser blocks such requests due to CORS policy.
Final Answer:
DELETE method is missing in AllowedMethods -> Option D
Quick Check:
AllowedMethods must include request method [OK]

Quick Trick: Add all HTTP methods your app uses to AllowedMethods [OK]

Common Mistakes:

Master "API Gateway" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

A developer wrote this CORS configuration but the browser still blocks DELETE requests: