diff --git a/Scripts/cors-policy.xml b/Scripts/cors-policy.xml
index 93c3ebe03..b97db988c 100644
--- a/Scripts/cors-policy.xml
+++ b/Scripts/cors-policy.xml
@@ -6,4 +6,11 @@
     <MaxAgeSeconds>3600</MaxAgeSeconds>
     <ExposeHeader>x-server-side-encryption</ExposeHeader>
   </CORSRule>
+  <CORSRule>
+    <AllowedOrigin>http://localhost:3000</AllowedOrigin>
+    <AllowedMethod>GET</AllowedMethod>
+    <AllowedHeader>*</AllowedHeader>
+    <MaxAgeSeconds>300</MaxAgeSeconds>
+    <ExposeHeader>x-server-side-encryption</ExposeHeader>
+  </CORSRule>
 </CORSConfiguration>