Amazon S3 and Cross-Origin Resource Sharing (CORS)

Question

Does Amazon S3 allow custom headers? Or am I out of luck?

Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Headers: X-SOMETHING
Access-Control-Max-Age: 1728000

Example

var request = new XMLHttpRequest();
var url = 'http://example.s3.amazonaws.com/templates/welcome.html';

function callOtherDomain(){

    request.open('GET', url, true);
    request.withCredentials = "true";
    request.onreadystatechange = handler;
    request.send();

}

Answer 1

CORS现在在S3上得到官方支持： http ： //docs.amazonwebservices.com/AmazonS3/latest/dev/cors.html

Answer 2

Currently, there is limited number of standrd http headers supported by s3.

\n

Access-Control-Allow-* headers are not supported at this time: https://forums.aws.amazon.com/thread.jspa?threadID=34281&tstart=0

UPDATE:

Support for Cross-Origin Resource Sharing is added: https://forums.aws.amazon.com/ann.jspa?annID=1620

S3 Browser Freeware also supports this feature: http://s3browser.com/s3-bucket-cors-configuration.php

Answer 3

可以在此处找到支持的HTTP标头列表： http ： //docs.amazonwebservices.com/AmazonS3/latest/API/index.html?RESTObjectPUT.html

Answer 4

今天，亚马逊宣布完全支持CORS，因此您现在可以使用HTML5将拖放文件直接用于Amazon S3。