CORS Allow Range header. Also needs configuration of S3 buckets.