Add note about CloudFront CORS configuration