Bucket CORS Configuration - Table of Contents

• Cross-Origin Resource Sharing Overview
• How to edit Bucket CORS Configuration
• Examples of Bucket CORS Configuration

Cross-Origin Resource Sharing Overview

Cross-origin resource sharing (CORS) is a web browser technology specification that defines ways for a web server to allow its resources to be accessed by a web page from a different domain - From Wikipedia, the free encyclopedia.

Recently Amazon S3 Team announced suppor for Cross-Origin Resource Sharing (CORS). You may now configure your bucket to allow cross-origin resource access using simple CORS configuration rules.

Starting from version 3.6.1 S3 Browser Freeware provides you an easy way to manage CORS configuration rules for your S3 buckets.

To edit Bucket CORS Configuration

1. Click Buckets, CORS Configuration:

You may also use the Ctrl+R keyboard shortcut to open CORS Configuration Editor.

The CORS Configuration Editor dialog will open:

CORS Configuration Editor dialog.

2. Enter or edit CORS Configuration and click the Apply button.

Please check some configuration examples below and AWS Documentation for more details.

Examples of Bucket CORS Configuration

<CORSConfiguration>
 <CORSRule>
   <AllowedOrigin>https://www.example.com</AllowedOrigin>

   <AllowedMethod>PUT</AllowedMethod>
   <AllowedMethod>POST</AllowedMethod>
   <AllowedMethod>DELETE</AllowedMethod>

   <AllowedHeader>*</AllowedHeader>
 </CORSRule>
 <CORSRule>
   <AllowedOrigin>*</AllowedOrigin>
   <AllowedMethod>GET</AllowedMethod>
 </CORSRule>
</CORSConfiguration>

The CORS configuration also allows optional configuration parameters:

<CORSConfiguration>
 <CORSRule>
   <AllowedOrigin>https://www.example.com</AllowedOrigin>
   <AllowedMethod>PUT</AllowedMethod>
   <AllowedMethod>POST</AllowedMethod>
   <AllowedMethod>DELETE</AllowedMethod>
   <AllowedHeader>*</AllowedHeader>
  <MaxAgeSeconds>3000</MaxAgeSeconds>
  <ExposeHeader>x-amz-server-side-encryption</ExposeHeader>
  <ExposeHeader>x-amz-request-id</ExposeHeader>
  <ExposeHeader>x-amz-id-2</ExposeHeader>
 </CORSRule>
</CORSConfiguration>

See AWS Documentation for elements description.