List of headers allowed.
One or more HTTP methods that you allow the origin to execute. Can be GET, PUT, POST, DELETE or HEAD.
GET
PUT
POST
DELETE
HEAD
One or more origins you want customers to be able to access the bucket from.
One or more headers in the response that you want customers to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).
XMLHttpRequest
Specifies time in seconds that browser can cache the response for a preflight request.