Policy & Security

S3 & R2 CORS Policy Generator

Fix Access-Control-Allow-Origin issues instantly. Generate validated CORS JSON and XML configuration rules tailored for AWS S3, Cloudflare R2, MinIO, and S3-compatible storage providers.

Configure CORS Rules

Select your target cloud provider and access preferences.

Storage Provider

Allowed Origins

Comma-separated domains or * for public access.

Allowed HTTP Methods

Allowed Headers

Max Age (Seconds)

CORS Configuration JSON

[
  {
    "AllowedOrigins": [
      "*"
    ],
    "AllowedMethods": [
      "GET",
      "PUT",
      "POST",
      "DELETE",
      "HEAD"
    ],
    "AllowedHeaders": [
      "*"
    ],
    "ExposeHeaders": [
      "ETag",
      "x-amz-request-id",
      "x-amz-id-2"
    ],
    "MaxAgeSeconds": 3600
  }
]

Need a faster way to browse & share S3 objects?

Explore BucketMate