Unable to crop media

This article is useful.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/ManageCorsUsing.html

When you use s3 in production, you should set AllowedOrigins your actual domain.