Hi there
We are experiencing the following on AWS
The origin (masked) is headless api custom gateway and has Access-Control-Allow-Headers already enabled, using cloudfront as a static content caching.