CORS doesnt work with cloudfront (currently)