Question

You want to allow a web app hosted on https://frontend.com to make GET and POST requests to your S3 bucket, but only allow the custom header 'X-Auth-Token'. Which CORS configuration is correct?

Accepted Answer

{ "CORSRules": [{ "AllowedOrigins": ["https://frontend.com"], "AllowedMethods": ["GET", "POST"], "AllowedHeaders": ["X-Auth-Token"] }] }

Answer

{ "CORSRules": [{ "AllowedOrigins": ["*"], "AllowedMethods": ["GET", "POST"], "AllowedHeaders": ["*"] }] }

Answer

{ "CORSRules": [{ "AllowedOrigins": ["https://frontend.com"], "AllowedMethods": ["GET"], "AllowedHeaders": ["X-Auth-Token"] }] }

Answer

{ "CORSRules": [{ "AllowedOrigins": ["https://frontend.com"], "AllowedMethods": ["GET", "POST"], "AllowedHeaders": ["Authorization"] }] }

You want to allow a web app hosted on https://frontend.com to make GET and POST requests to your S3 bucket, but only allow the custom header 'X-Auth-Token'. Which CORS configuration is correct?

Step 1: Match AllowedOrigins and Methods

Step 2: Check AllowedHeaders

Final Answer:

Quick Check:

Want More Practice?