Description

Add support for ResponseHeadersPolicy as described in the following docs:

1. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/creating-response-headers-policies.html
2. https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-cloudfront-supports-cors-security-custom-http-response-headers/

Use Case

We need to be able to configure response CORS, headers and security policies without using cloudfront functions or Lambda@edge.

Proposed Solution

The ResponseHeadersPolicy should be available as a new construct under the @aws-cdk/aws-cloudfront construct library.

Other information

No response

Acknowledge

• I may be able to implement this feature request
• This feature might incur a breaking change