Adobe Experience Manager's Cross-Origin Resource Sharing (CORS) facilitates non-AEM web properties to make client-side calls to AEM, both authenticated and unauthenticated, to fetch content or directly interact with AEM.
Adobe Granite Cross-Origin Resource Sharing Policy OSGi configuration
CORS configurations are managed as OSGi configuration factories in AEM, with each policy being represented as one instance of the factory.
1. http://:/system/console/configMgr > Adobe Granite Cross Origin Resource Sharing Policy
Adobe Granite Cross-Origin Resource Sharing Policy ( com.adobe.granite.cors.impl.CORSPolicyImpl )