No hope for CORS on cloudfront.