How to restrict a lambda function to respond only to a specific origin?

I want to restrict my lambda function to accept requests only from abc.com and def.com. It should reject all other requests. How can I do this? I tried setting access control origins like this:

      cors: true
      response:
        headers:
          Access-Control-Allow-Origin: "'beta.leafycode.com leafycode.com'"

and like this in the handler:

headers: {
  "Access-Control-Allow-Origin" : "beta.leafycode.com leafycode.com" // Required for CORS support to work
},

but nothing worked. Any idea why?

[HyperBrain]

You’re welcome

[pmuens]

Great to see that it’s working for you @THPubs 🎉

@HyperBrain thanks a ton for helping here! 🥇 👍