403 CORS Error ONLY on work Laptop and not personal

Question

Hi All,
I am getting a 403 CORS error from an API Gateway endpoint ONLY when i use my work laptop. 
**On my personal laptop everything works fine. 
**
I checked the with the local IT team and they said there is no firewall policy or anything that prevents CORS. Also i tried installing and enabling chrome extension for CORS on my work laptop.  It did not work.

Here is the error
`Access to fetch at 'xyz' from origin 'abc' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: It does not have HTTP ok status.`

In response header i see 
```
x-amzn-errortype: ForbiddenException
access-control-allow-origin: *
access-control-allow-methods: PUT, GET, HEAD, POST, DELETE, OPTIONS
content-type: application/json
x-amzn-apigw-id: 12344..
```
The surprising thing is it happens only on work laptop, Has anyone faced this issue before?

Answer

When you are calling the API from your personal laptop, it is going over the public internet while when you are calling it from your work laptop, it is possible that the request is going from your corporate network to AWS over DirectConnect or VPN. And possibly some other issue is manifesting itself as a CORS issue because the request is not going to your backend but instead a Gateway response is being returned by API Gateway and CORS has not been configured properly for Gateway responses. You can get more information by looking at the developer tools on your browser to check the request and response parameters for the failed API request. Can you check this AWS Support Knowledge Center article to ensure CORS is configured correctly for your API, including for Gateway responses - https://aws.amazon.com/premiumsupport/knowledge-center/api-gateway-cors-errors/#:~:text=Cross%2DOrigin%20Resource%20Sharing%20(CORS,to%20meet%20the%20CORS%20standard.

403 CORS Error ONLY on work Laptop and not personal

相關內容