http://blog.hongstalk.com/?p=258
[aws] s3 CORS bucket policy