title: Is it possible to set Content-Security-Policy headers in Amazon S3?
body: <p>I'm trying to set a Content-Security-Policy header for an html file I'm serving via s3/cloudfront. I'm using the web-based AWS console. Whenever I try to add the header:</p>
  
  <p><img src="https://i.stack.imgur.com/lHw5c.png" alt="enter image description here"></p>
  
  <p>it doesn't seem to respect it. What can I do to make sure this header is served?</p>