Configuration: ```xml <?xml version="1.0" encoding="UTF-8"?> <CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"> <CORSRule> <AllowedMethod>GET</AllowedMethod> <AllowedMethod>HEAD</AllowedMethod> <AllowedOrigin>*</AllowedOrigin> </CORSRule> </CORSConfiguration> ``` S3: ``` Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD ``` R2: ``` access-control-allow-origin: * access-control-expose-headers: ```