Sample AmazonS3 Cors configuration to allow cross domain requests and expose headers.

cors.xml

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
    <CORSRule>
        <AllowedOrigin>*</AllowedOrigin>
        <AllowedMethod>GET</AllowedMethod>
        <MaxAgeSeconds>3000</MaxAgeSeconds>
        <AllowedHeader>Authorization</AllowedHeader>
        <ExposeHeader>x-amz-meta-author</ExposeHeader>
        <ExposeHeader>x-amz-meta-caption</ExposeHeader>
        <AllowedHeader>x-amz-*</AllowedHeader>
    </CORSRule>
</CORSConfiguration>