You are configuring Cross-Origin Resource Sharing for your S3 bucket. You need to ensure that external domain sites can only issue the GET requests against your bucket. Which of the following would you modify as part of the CORS configuration for this requirement?

Answer options:

A.AllowedOrigin Element
B.AllowedHeader Element
C.AllowedMethod Element
D.MaxAgeSeconds Element

Answer - C
This is mentioned in the AWS Documentation.
Option A is invalid since it is used to specify the origins you want to allow cross-domain requests.
Option B is invalid since this is used to specify which headers are allowed in a preflight request through the Access-Control-Request-Headers header.
Option D is invalid since it is used to specify the time in seconds that your browser can cache the response for a preflight request identified by the resource, the HTTP method, and the origin.
For more information on CORS, please refer to the below URL-
https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html