aws API Gateway CORS: Reason: header ‘access-control-allow-headers’ is not allowed according to header ‘Access-Control-Allow-Headers’

Question

I followed an amazon workshop to embed QuickSight interface into an external web page (Session Embedding), I configured S3, cloudfront and API Gateway to enable Cors but sti