You have developed a Web-based application that makes calls to backend API. Which of the following headers are required by Web browsers to be set up in each API method which has CORS enabled? (Select TWO)

Answer options:

A.Access-Control-Allow-Headers
B.Access-Control-Allow-CORS
C.Access-Control-Expose-Headers
D.Access-Control-Expose-Origin
E.Access-Control-Allow-Origin

Correct Answer – A, E
To support CORS, API resource needs to implement an OPTIONS method to respond to the OPTIONS preflight request with the following headers.
Access-Control-Allow-Headers
Access-Control-Allow-Origin
Access-Control-Allow-Methods
Option B, C & Dare incorrect as both these headers are not required to be included as a part of the OPTIONS method.
For more information on enabling CORS on resource using API Gateway, refer to the following URL-
https://docs.aws.amazon.com/apigateway/latest/developerguide/enable-cors-for-resource-using-swagger-importer-tool.html