> ## Documentation Index > Fetch the complete documentation index at: https://api-docs.sevalla.com/llms.txt > Use this file to discover all available pages before exploring further. # Create CORS policy > Add a new CORS policy rule to the object storage bucket. The rule is appended to any existing rules. ## OpenAPI ````yaml https://api.sevalla.com/v3/openapi.json post /object-storage/{id}/cors-policies openapi: 3.1.0 info: title: Sevalla API docs version: 1.0.0 servers: - url: https://api.sevalla.com/v3 security: - bearerAuth: [] paths: /object-storage/{id}/cors-policies: post: tags: - Object storages summary: Create CORS policy description: >- Add a new CORS policy rule to the object storage bucket. The rule is appended to any existing rules. operationId: createObjectStorageCorsPolicyV3 parameters: - schema: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ example: fb5e5168-4281-4bec-94c5-0d1584e9e657 in: path name: id required: true description: Object storage bucket identifier requestBody: required: true content: application/json: schema: type: object properties: methods: minItems: 1 type: array items: type: string enum: - GET - PUT - POST - DELETE - HEAD description: >- HTTP methods allowed by this CORS rule. At least one method is required. `GET` - read objects. `PUT` - upload objects. `POST` - create objects. `DELETE` - remove objects. `HEAD` - retrieve object metadata. example: - GET - PUT origins: minItems: 1 maxItems: 100 type: array items: type: string minLength: 1 maxLength: 250 description: >- Origins allowed by this CORS rule. Use "*" to allow all origins. Maximum 100 origins. example: - https://example.com headers: description: HTTP headers allowed in CORS requests. Maximum 100 headers. example: - Content-Type maxItems: 100 type: array items: type: string minLength: 1 maxLength: 250 required: - methods - origins additionalProperties: false responses: '201': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Confirmation message example: CORS policy created required: - message additionalProperties: false '400': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Error message example: Bad request status: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: HTTP status code example: 400 data: type: object properties: code: description: Error tracking code for support reference example: err-abc-123 type: string message: description: Additional error details or instructions example: >- If you need assistance, please contact support and provide this error code. type: string additionalProperties: false required: - message - status additionalProperties: false '401': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Error message example: Unauthorized status: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: HTTP status code example: 401 data: type: object properties: code: description: Error tracking code for support reference example: err-abc-123 type: string message: description: Additional error details or instructions example: >- If you need assistance, please contact support and provide this error code. type: string additionalProperties: false required: - message - status additionalProperties: false '403': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Error message example: Forbidden status: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: HTTP status code example: 403 data: type: object properties: code: description: Error tracking code for support reference example: err-abc-123 type: string message: description: Additional error details or instructions example: >- If you need assistance, please contact support and provide this error code. type: string additionalProperties: false required: - message - status additionalProperties: false '404': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Error message example: Not found status: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: HTTP status code example: 404 data: type: object properties: code: description: Error tracking code for support reference example: err-abc-123 type: string message: description: Additional error details or instructions example: >- If you need assistance, please contact support and provide this error code. type: string additionalProperties: false required: - message - status additionalProperties: false '429': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Error message example: Too many requests status: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: HTTP status code example: 429 data: type: object properties: code: description: Error tracking code for support reference example: err-abc-123 type: string message: description: Additional error details or instructions example: >- If you need assistance, please contact support and provide this error code. type: string additionalProperties: false required: - message - status additionalProperties: false '500': description: Default Response content: application/json: schema: type: object properties: message: type: string description: Error message example: Internal Server Error status: type: integer minimum: -9007199254740991 maximum: 9007199254740991 description: HTTP status code example: 500 data: type: object properties: code: description: Error tracking code for support reference example: err-abc-123 type: string message: description: Additional error details or instructions example: >- If you need assistance, please contact support and provide this error code. type: string additionalProperties: false required: - message - status additionalProperties: false components: securitySchemes: bearerAuth: type: http scheme: bearer description: >- API key authentication. Pass your API key as a Bearer token in the Authorization header. ````