I have the following CORS configuration for S3 in order to use one of my buckets as a static website hosting:
This isn't CORS related -- it's S3 itself. The S3 website endpoints are only equipped for GET and HEAD. Anything else should be denied before the redirection rules are checked.
Website Endpoint
Supports only GET and HEAD requests on objects.
— http://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html
If you want to use POST request to S3, you need to use root object in your browser by creating POSTPolicy to get S3 authentication
you can refer Browser-Based Upload using HTTP POST