title: AWS CloudFront Cors
body: <p>Trying to use CloudFront but getting the following CORs error (CORs Access-Control-Allow-Origin):</p>
  
  <pre><code>Access to Font at 'https://d1nic7y05p6u7o.cloudfront.net/pub/static/version1512716215/adminhtml/Magento/backend/en_US/fonts/opensans/semibold/opensans-600.ttf' from origin 'https://website.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://website.com' is therefore not allowed access.
  </code></pre>
  
  <p>I'm not using an S3 bucket so I can't just set CORs there (goes to the website to get the media). I whitelisted "Origin" but not sure how to forward that request to s3 or something to do the header "Access-Control-Allow-Origin"? A website said I needed to set the header on my apache server, didn't make sense to me but I tried it and still didn't work.</p>