CORS error with Cloudflare in front of AWS API Gateway

General
1

I’ve created a Cloudflare proxy to point to the APIs deployed on AWS API Gateway.

I’ve followed all steps - generated certificate in Cloudflare, imported cert in AWS, created custom domain names, mapped APIs, created CNAME records, etc.
Connect Cloudflare to AWS API Gateway | Medium | Medium

Configuration is like:

  1. Cloudflare DNS name is api-test.mydomain.com.
  2. AWS API custom domain name url is like https://d-xxxxxx.execute-api.us-west-1.amazonaws.com
  3. AWS API invoke url in the deployed stage is https://yyyyyy.execute-api.us-west-1.amazonaws.com

In the Rules in Cloudflare, I added the rule - api-.mydomain.com/ to use strict SSL as recommended on one of the threads. (I’ve other APIs also on AWS API Gateway, like api-test2.mydomain.com, etc.)

When I’m testing the API using either Cloudflare DNS name or AWS API custom domain name url, I’m getting CORS error, like:

Access to XMLHttpRequest at ‘https://api-test.mydomain.com/api/v1/users?u=xyz’ from origin ‘https://mydomain.com’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: It does not have HTTP ok status.
The API call doesn’t even show up in the Cloudwatch logs.

When i’m testing with AWS API invoke url in the deployed stage, I’m able to get a response, and everything works fine.

Any help in resolving the CORS error is highly appreciated. Also, if any other information is required then please let me know.

Thanks in advance!

2

Greetings,

Thank you for asking and for a brief feedback information about the sitiation and the error you are encountering.

:+1:

May I just ask is the hostname (DNS record) proxied and set to :orange: , correct?

It sounds to me like the AWS Bucket / AWS API Gateway is missing HTTP Headers like Access-Control-Allow-Origin and/or related to it (per need)?

May I suggest to take a look at the articles from below:

3

Thanks for your response.
I’ve tried all these three options.

Also, I’ve set DNS record to proxy only.

image
image1011×41 3.65 KB

Thanks

4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.