Create an allowlist of domains for CORS pre-flight requests.
By instrumenting CORS, a browser's request will be validated against an OPTIONS request inside of API Gateway. API Gateway only allows a single domain to be registered or a `*` can be utilized to allow all domains. In the case of more restriction and more flexibility, a whitelist of allowed domains can be built using a Lambda that is executed via a Proxy Integration.
< Back to all patterns
Clone repo
git clone https://github.com/aws-samples/serverless-patterns/cd serverless-patterns/api-gateway-cors-whitelist-cdkDeploy
make build-and-deployTesting
See the GitHub repo for detailed testing instructions.
Cleanup
make teardown
Created by:
