Set set the following _CORS Configuration_ to your bucket:
Set set the following _CORS Configuration_ to your bucket.
XML format (if using the old AWS console Interface):
```markup
<?xml version="1.0" encoding="UTF-8"?>
...
...
@@ -17,6 +19,29 @@ Set set the following _CORS Configuration_ to your bucket:
</CORSConfiguration>
```
JSON format (if using the new AWS console Interface):
```js
[
{
"AllowedHeaders":[
"*"
],
"AllowedMethods":[
"PUT",
"POST",
"GET",
"HEAD"
],
"AllowedOrigins":[
"*ROCKET_CHAT_DOMAIN*"
],
"ExposeHeaders":[],
"MaxAgeSeconds":3000
}
]
```
**Note**: Replace `*ROCKET_CHAT_DOMAIN*` with the domain of your Rocket.Chat installation, e.g. `https://chat.example.com`. If for some reason you want to make your CORS configuration ridiculously insecure, you can set it to `*` to allow CORS requests from any host on the Internet, but do so at your own risk.