A list of headers that will be included in the CORS preflight request's Access-Control-Request-Headers. A header may contain one wildcard (e.g. x-amz-*).
Access-Control-Request-Headers
x-amz-*
A list of HTTP methods (e.g. GET) which are allowed from the specified origin.
GET
A list of hosts from which requests using the specified methods are allowed. A host may contain one wildcard (e.g. http://*.example.com).
The time in seconds that browser can cache the response for a preflight request. */