Amazon S3 and Cross-Origin Resource Sharing (CORS)

Question

Does Amazon S3 allow custom headers? Or am I out of luck?

Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: X-SOMETHING Access-Control-Max-Age: 1728000 

Example

var request = new XMLHttpRequest(); var url = 'http://example.s3.amazonaws.com/templates/welcome.html';  function callOtherDomain(){      request.open('GET', url, true);     request.withCredentials = "true";     request.onreadystatechange = handler;     request.send();  } 

Answer 1

CORS is now officially supported on S3: http://docs.amazonwebservices.com/AmazonS3/latest/dev/cors.html