AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

You are viewing documentation for version 2 of the AWS SDK for Ruby. Version 3 documentation can be found here.

Class: Aws::MediaStore::Types::CorsRule

Inherits:
Struct
  • Object
show all
Defined in:
(unknown)

Overview

Note:

When passing CorsRule as input to an Aws::Client method, you can use a vanilla Hash:

{
  allowed_origins: ["Origin"], # required
  allowed_methods: ["PUT"], # accepts PUT, GET, DELETE, HEAD
  allowed_headers: ["Header"], # required
  max_age_seconds: 1,
  expose_headers: ["Header"],
}

A rule for a CORS policy. You can add up to 100 rules to a CORS policy. If more than one rule applies, the service uses the first applicable rule listed.

Instance Attribute Summary collapse

Instance Attribute Details

#allowed_headersArray<String>

Specifies which headers are allowed in a preflight OPTIONS request through the Access-Control-Request-Headers header. Each header name that is specified in Access-Control-Request-Headers must have a corresponding entry in the rule. Only the headers that were requested are sent back.

This element can contain only one wildcard character (*).

Returns:

  • (Array<String>)

    Specifies which headers are allowed in a preflight OPTIONS request through the Access-Control-Request-Headers header.

#allowed_methodsArray<String>

Identifies an HTTP method that the origin that is specified in the rule is allowed to execute.

Each CORS rule must contain at least one AllowedMethods and one AllowedOrigins element.

Returns:

  • (Array<String>)

    Identifies an HTTP method that the origin that is specified in the rule is allowed to execute.

#allowed_originsArray<String>

One or more response headers that you want users to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).

Each CORS rule must have at least one AllowedOrigins element. The string value can include only one wildcard character (*), for example, http://*.example.com. Additionally, you can specify only one wildcard character to allow cross-origin access for all origins.

Returns:

  • (Array<String>)

    One or more response headers that you want users to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).

#expose_headersArray<String>

One or more headers in the response that you want users to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).

This element is optional for each rule.

Returns:

  • (Array<String>)

    One or more headers in the response that you want users to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).

#max_age_secondsInteger

The time in seconds that your browser caches the preflight response for the specified resource.

A CORS rule can have only one MaxAgeSeconds element.

Returns:

  • (Integer)

    The time in seconds that your browser caches the preflight response for the specified resource.