CORS: AccessControlAllowOrigin header with mulltiple domain values

I have a website "Website1" having list of resources (images/css/js files), and i have a multiple client websites, who consume the resource from my website "Website1".

I need to add the AccesscontrolAlloworigin header in the response content to solve the CORS issue (for ajax call) only to the whitelisted client requests.

Also my content is having some caching logic, i cannot add the header every time the request is processed. Can i add all the whitelisted domain names as the Access control allow origin header value or is there any work around to do that ( I don't want to add * as the value, i need to allow only whitelisted domain names strictly). Any help appreciated.