I am trying use java script to access an AWS api gateway to call a lambda with passing through headers. Testing via postman works fine.
But then I attempt to access via java script

I get the following:
'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,Access-Control-Allow-Headers,Access-Control-Allow-Origin'

I have added in acaH and acaO to the header mapping for the option in AWS api as suggested in a number of articles, saved and redeployed to no affect.
I have enabled CORS on both the GET and OPTION methods to no avail.
I will freely admit I just barely understand the CORS concept, am I missing something very obvious?