Document how to expose headers for S3 CORS configuration
Update AllowedOrigin example to recommend a specific origin