---
title: "Bucket CORS"
url: https://docs.catalyst.zoho.com/en/cloud-scale/help/stratus/stratus-config/bucket-cors/
description: "Stratus is a robust cloud storage solution powered by Catalyst. You can store data of any format type in the form of buckets and objects."
last_updated: 2026-09-08T11:07:33Z
service: Cloud Scale
type: general
related_links:
  - name: "Create a Bucket"
    url: /en/cloud-scale/help/stratus/buckets/create-bucket/
  - name: "Upload an Object"
    url: /en/cloud-scale/help/stratus/objects/upload-object/
  - name: "Java SDK"
    url: /en/sdk/java/v1/cloud-scale/stratus/get-bucket-cors/
  - name: "JavaScript SDK"
    url: /en/sdk/javascript/v1/cloudscale/stratus/get-bucket-cors/
  - name: "Python SDK"
    url: /en/sdk/python/v1/cloud-scale/stratus/get-bucket-cors/
  - name: "iOS SDK"
    url: /en/sdk/ios/v2/cloud-scale/stratus/overview/
  - name: "Android SDK"
    url: /en/sdk/android/v2/cloud-scale/stratus/overview/
  - name: "Flutter SDK"
    url: /en/sdk/flutter/v2/cloud-scale/stratus/overview/
  - name: "REST API"
    url: /en/api/code-reference/cloud-scale/stratus/get-all-buckets/#GetAllBuckets
---

# Bucket CORS

Cross-origin Resource Sharing (**CORS**), is a feature of Stratus that you can use to whitelist certain domains that require access to the objects stored in your bucket.

You can authorize applications you have hosted using [Catalyst AppSail](https://docs.catalyst.zoho.com/en/serverless/help/appsail/introduction/), or even applications you have hosted on third-party platforms to access objects stored in Stratus.

![catalyst_stratus_cors_add_domain_button](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_add_domain_button.webp)

You can authorize and whitelist the required domains directly in the console and approve the domains to access objects from your buckets. This operation can be performed in the [development](https://docs.catalyst.zoho.com/en/deployment-and-billing/environments/development-environment/) environment and your configurations can be migrated to the [production](https://docs.catalyst.zoho.com/en/deployment-and-billing/environments/production-environment/) environment.

### Whitelist Domains Using Bucket CORS

To authorize a domain for CORS:

Click on the required bucket.
    ![catalyst_stratus_bucket_names_first](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_bucket_names_first.webp)

2. Click the **Configurations** tab.
    ![catalyst_stratus_configurations_list](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_configurations_list.webp)

3. Expand the **Bucket CORS** section and click **Add Domain**.
    ![catalyst_stratus_cors_add_domain_button](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_add_domain_button.webp)

4. Enter the complete URL of the domain you need to enable CORS for, with the required **Request Method** (`GET`, `POST`, `PUT`, `DELETE`, or `HEAD`).
    ![catalyst_stratus_cors_adding_domain](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_adding_domain.webp)

5. Click **Add** to whitelist the required domains.
    ![catalyst_stratus_cors_added_domains](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_added_domains.webp)

The required domain will be whitelisted and CORS will be enabled for the required domain.
![catalyst_stratus_cors_domain_enabled_cors](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_domain_enabled_cors.webp)

> **Note:** CORS of a bucket can be edited by any user that has or has been granted `Write` permission for Stratus component in the project, using the [Profiles & Permissions](https://docs.catalyst.zoho.com/en/getting-started/set-up-a-catalyst-project/profiles-and-permissions/) section.

### Edit Bucket CORS

To edit bucket CORS:

1. Click the ellipsis icon next to the domain and click **Edit**.
    ![catalyst_stratus_cors_domain_edit_button](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_domain_edit_button.webp)

2. Make the required changes and click **Update**.
    ![catalyst_stratus_cors_update_edits](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_update_edits.webp)

The changes will be applied.

![catalyst_stratus_cors_updated_changed](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_updated_changed.webp)

### Delete Bucket CORS

To disable or remove a domain from the whitelist:

1. Click the ellipsis icon next to the domain and click **Delete**.
    ![catalyst_stratus_delete_cors_button](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_delete_cors_button.webp)

2. Click **Confirm** to delete the domain.
    ![catalyst_stratus_cors_del_confirm](https://catalyst-docs-development.zohostratus.in/images/help/stratus/catalyst_stratus_cors_del_confirm.webp)

The domain will be deleted, and will no longer be whitelisted.