title: Amazon S3 CORS headers only show during OPTIONS (preflight) and not during GET request
body: <p>I have an S3 bucket with the following CORS config.</p>
  
  <pre><code>&lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"&gt;
      &lt;CORSRule&gt;
          &lt;AllowedOrigin&gt;*&lt;/AllowedOrigin&gt;
          &lt;AllowedMethod&gt;GET&lt;/AllowedMethod&gt;
          &lt;MaxAgeSeconds&gt;3000&lt;/MaxAgeSeconds&gt;
          &lt;AllowedHeader&gt;Authorization&lt;/AllowedHeader&gt;
      &lt;/CORSRule&gt;
  &lt;/CORSConfiguration&gt;
  </code></pre>
  
  <p>The preflight check works as expected.</p>
  
  <pre><code>★ ~$ curl -i -X OPTIONS -H "Origin: http://stackoverflow.com" -H "Access-Control-Request-Method: GET" https://s3.amazonaws.com/random-stuff-ohyea/coderot.gif
  HTTP/1.1 200 OK
  x-amz-id-2: H6tzMUCJtYgiCRrhj5DucMhjjYtj1kKWqL7u2yaRGEorOeKhu/sTKlgGqY7uHxQC
  x-amz-request-id: E784C4373565CBE6
  Date: Mon, 21 Oct 2013 22:14:18 GMT
  Access-Control-Allow-Origin: http://stackoverflow.com
  Access-Control-Allow-Methods: GET
  Access-Control-Max-Age: 3000
  Access-Control-Allow-Credentials: true
  Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
  Content-Length: 0
  Server: AmazonS3
  </code></pre>
  
  <p>However the origin header on a GET request doesn't.</p>
  
  <pre><code>★ ~$ curl -iI -H "Origin: http://stackoverflow.com" https://s3.amazonaws.com/random-stuff-ohyea/coderot.gif
  HTTP/1.1 200 OK
  x-amz-id-2: KlrSviRSwq/40zPwOGp2/lJZk0J2Fyu7kOg966osOvQ2mpbpiv5BLkihGSOfoLd8
  x-amz-request-id: 9D051B0001F48AB7
  Date: Mon, 21 Oct 2013 22:11:57 GMT
  Last-Modified: Mon, 21 Oct 2013 22:10:53 GMT
  ETag: "4fa16333380378e116479646b40dd1ee"
  Accept-Ranges: bytes
  Content-Type: image/gif
  Content-Length: 1774246
  Server: AmazonS3
  </code></pre>
  
  <p>This matters because firefox doesn't seem to do preflight checks when loading remote fonts that I have in my s3 bucket. It only seems to send the origin header.</p>