One call works fine but another fails due to blocked by CORS policy: No 'Access-Control-Allow-Origin' header

Question

Locally of course everything works great. My server is a NodeJS app running on Elastic Beanstalk, behind an Application Load Balancer, and being accessed via HTTPS

On