S3/CloudFront CORS "has been blocked by CORS policy"

my app hosted in s3 and cached by cloudfront. trying to call an API(cant change/access) but getting a "has been blocked by CORS policy" I have done the below changes:

plus In S3 permissions i have added the belowl:

any ideas? Thanks