Set bucket CORS parameters on S3 bucket creation

[kantai]

On creating a new S3 bucket, the gaia hub should probably set a permissive CORS property for the bucket, using:

https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.html#putBucketCors-property

This is so that apps can read from that bucket directly if necessary.

[jcnelson]

What would be a good policy? Can you list an example here?

[kantai]

I think this:

     AllowedMethods: [
        "GET", 
        "HEAD"
     ], 
     AllowedOrigins: [
        "*"
     ],