Amazon CloudFront recently added support for response headers policies, removing the need of custom Lambda@Edge and CloudFront functions to insert response headers.
Start
United States
USA — software Amazon CloudFront Supports Configurable CORS and Custom HTTP Response Headers