What should Company D do to prevent the web fonts from being blocked by the browser?

Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser.

What should Company D do to prevent the web fonts from being blocked by the browser?
A . Enable versioning on the cdfonts bucket for each web font
B . Create a policy on the cdfonts bucket to enable access to everyone
C . Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website
D . Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration

Answer: D

Explanation:

https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html