Set CORS Header for default API Gateway responses (4xx/5xx)

[clebert]

[unstubbable]

Maybe this could work:

new CfnGatewayResponse(stack, 'ApiGatewayUnauthorizedResponse', {
    statusCode: '4xx',
    responseType: 'DEFAULT_4XX',
    restApiId: restApi.restApiId,
    responseParameters: {
      'gatewayresponse.header.Access-Control-Allow-Origin': "'*'",
    },
  });

[unstubbable]

see also https://docs.aws.amazon.com/apigateway/api-reference/resource/gateway-response/