JavaScript in the browser cannot display the contents of an Amazon S3 bucket unless the bucket has the proper cross-origin resource sharing (CORS) configuration.

To configure CORS, you create a CORS configuration that identifies the origins allowed to access your bucket and the operations (HTTP methods) supported.

To do this, select your bucket in the buckets panel of the Amazon S3 Console and click to reveal Permissions in the Properties pane. Click Edit CORS Configuration. The CORS Configuration Editor panel will open up with a field where you can enter a CORS Configuration. Enter a configuration similar to the following:

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
    <CORSRule>
        <AllowedOrigin>*</AllowedOrigin>
        <AllowedMethod>GET</AllowedMethod>
        <AllowedMethod>POST</AllowedMethod>
        <AllowedMethod>PUT</AllowedMethod>
        <AllowedMethod>HEAD</AllowedMethod>
        <MaxAgeSeconds>3000</MaxAgeSeconds>
        <AllowedHeader>*</AllowedHeader>
        <ExposeHeader>ETag</ExposeHeader>
        <ExposeHeader>x-amz-meta-myheader</ExposeHeader>
    </CORSRule>
</CORSConfiguration>

Please see the project README for more specific details on how to create an appropriate CORS configuration.

Here is a sample S3 bucket policy that you can use. Change 999999999999 to your AWS account number and change mybucket to your bucket name.

{
    "Version": "2012-10-17",
    "Statement": [{
        "Sid": "AllPermissionsForOwner",
        "Effect": "Allow",
        "Principal": {
            "AWS": "arn:aws:iam::999999999999:root"
        },
        "Action": "s3:*",
        "Resource": "arn:aws:s3:::mybucket/*"
    }]
}

Please see the project README for more specific details on how to create an appropriate S3 bucket policy.