def METHOD_NAME(lambda_function_url_endpoint):
    # GIVEN
    url = f"{lambda_function_url_endpoint}todos"
    headers = {"Origin": "https://www.google.com"}
    # WHEN
    response = data_fetcher.get_http_response(
        Request(
            method="POST",
            url=url,
            headers=headers,
            json={},
            auth=build_iam_auth(url=url, aws_service="lambda"),
        ),
    )
    # THEN response does NOT have CORS headers
    assert "Access-Control-Allow-Origin" not in response.headers