I am having this problem with CORS policy. Testing the code on Chrome (I have to perform a Delete operation) I get the following error:

Access to XMLHttpRequest at 'https://4tlo527oot.execute-api.us-east-2.amazonaws.com/editors/9' from origin 'null' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I am building a CRUD using the lambda functions (with get I don't get the error highlighted above), I have verified that it is not a server level error because with Postman I can execute them correctly.

  const headers = {
    "Content-Type": "application/json",
    "Access-Control-Allow-Origin": "*",
    "Access-Control-Allow-Methods": "DELETE"
  };