11

In AWS CloudFront I set this within: "Allowed HTTP Methods" in the "Default Cache Behavior Settings" area: GET, HEAD, OPTIONS, PUT, POST, PATCH, DELETE

My CloudFront is linked to an AWS S3 bucket. So I set the AWS S3 CORS configuration to:

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
    <CORSRule>
        <AllowedOrigin>*</AllowedOrigin>
        <AllowedMethod>GET</AllowedMethod>
        <AllowedMethod>PUT</AllowedMethod>
        <AllowedMethod>POST</AllowedMethod>
        <AllowedMethod>DELETE</AllowedMethod>
        <AllowedMethod>HEAD</AllowedMethod>
        <MaxAgeSeconds>3000</MaxAgeSeconds>
        <AllowedHeader>Authorization</AllowedHeader>
    </CORSRule>
</CORSConfiguration>

My current AWS S3 bucket policy is:

{
    "Version": "2008-10-17",
    "Statement": [
        {
            "Sid": "AllowPublicRead",
            "Effect": "Allow",
            "Principal": {
                "AWS": "*"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::<bucket_name_here>/*"
        }
    ]
}

Unfortunately when run through curl I get:

$ curl -I -s -X POST -H "Origin: www.example.com" [hash_here].cloudfront.net
HTTP/1.1 405 Method Not Allowed
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, HEAD
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Allow: GET, DELETE, HEAD, PUT
Date: Sun, 01 Mar 2015 14:12:26 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 5896eef8502a96757950c7d389f2015c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: uBK_gStEvSTWypvU8_YYjtfjC2UzdR3Ff_cDLitMaeUBNZ9AgrSkJg==
7
  • From the response you have posted it looks like the error is returned by S3, not CloudFront. Did you properly setup bucket access permissions so CloudFront could POST there?
    – Alex Z
    Mar 7, 2015 at 0:36
  • I think I did, everything I did is outlined in my question. If I'm missing a step, then point out where and I'll accept the working solution as answer :) Mar 7, 2015 at 0:51
  • Take a look here: docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/…. It talks about permissions to read object, but I think you might need to explicitly enable write permission for Origin Access Identity you use for CloudFront
    – Alex Z
    Mar 7, 2015 at 1:42
  • Samuel, from I can see you did not set up correct bucket policy for your your be*****-frontend S3 bucket. Currently it allows only public reads, while you need to allow posting to it (docs.aws.amazon.com/AmazonS3/latest/dev/…). The easiest way to do this automatically would be to set up Origin Access Identity in your CloudFront configuration; CloudFront will automatically add required permissions to your bucket policy. Cheers, your CloudFront team. Mar 7, 2015 at 2:16
  • Actually @DmitryGuyvoronsky I seem to be approaching this problem incorrectly. I have JavaScript doing GET/POST/PUT/DELETE to a custom REST API on EC2 with failover via ELB. Should I use Route 53 to direct calls to /api/* to ELB, and all other paths to CloudFront? - Or should I use CloudFront's "Custom Origins" (ref) to forward onto my /api/*? Mar 8, 2015 at 6:32

1 Answer 1

5

It may be too late to answer this question. One of the causes of this issue is the Default Root Object . The POST request must be made to the cloudfront root url ("/"). Check the 'Default Root Object' settings in cloudfront. Its value must be empty, and not index.html.

2
  • 1
    That didn't make a difference in my case, unfortunately
    – Leon
    Mar 20, 2018 at 19:45
  • This did fix my issue. If it isn't the answer for everyone, it is at least something that should be in the checklist.
    – bts
    Jun 15, 2018 at 14:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.