apiGateway Cors

apiGatewayCors.yaml

Resources:
  Api:
    Type: AWS::Serverless::Api
    Properties:
      StageName: Prod
      Cors:
        AllowHeaders: "'*'"
        AllowMethods: "'*'"
        AllowOrigin: "'*'"
      EndpointConfiguration:
        Type: EDGE

CloudFrontCors.yaml

AWSTemplateFormatVersion: 2010-09-09
Resources:
  CloudFrontCachePolicy:
    Type: AWS::CloudFront::CachePolicy
    Properties: 
      CachePolicyConfig: 
        CachePolicyConfig
  cloudfrontdistribution:
    Type: AWS::CloudFront::Distribution
    Properties:
      Restrictions:
        GeoRestriction:
          RestrictionType: whitelist
          Locations:
            - TH
            - SG
            - US
            - UK
      DistributionConfig:
        CacheBehaviors:
          - LambdaFunctionAssociations:
              - EventType: string-value
                LambdaFunctionARN: string-value
        OriginCustomHeaders:
          - HeaderName: Access-Control-Allow-Origin
            HeaderValue: *
          - HeaderName: Access-Control-Allow-Methods
            HeaderValue: *
          - HeaderName: Access-Control-Allow-Headers
            HeaderValue: *
            
        Origins:
          - DomainName: !Sub "${OrismaSearchApi}.execute-api.${AWS::Region}.amazonaws.com"
            OriginPath: "/Prod/orismaSearch"
            Id: orismasearchorigin
            ConnectionTimeout: 5
            OriginCustomHeaders:
              - HeaderName: Access-Control-Allow-Origin
                HeaderValue: "*"
              - HeaderName: Access-Control-Allow-Methods
                HeaderValue: "*"
              - HeaderName: Access-Control-Allow-Headers
                HeaderValue: "*"