我正在从 aws s3 静态网站调用我的 rest 端点并低于 CORS 错误

Access to fetch at 'http://[my-public-ip]:5225/user/1' 
from origin 'http://[my-bucket].s3-website-us-east-1.amazonaws.com' 
has been blocked by CORS policy: The request client is not a secure context 
and the resource is in more-private address space `private`.

我的springboot中有以下代码允许cors，我也尝试了各种其他组合，如allowedOrigins、allowedMethods，但它们都不起作用

@Override
public void addCorsMappings( CorsRegistry registry ) {
  registry.addMapping( "/**" );
}

我也尝试在 s3 中添加 cors 设置

[
    {
        "AllowedHeaders": [
            "Authorization"
        ],
        "AllowedMethods": [
            "GET",
            "HEAD"
        ],
        "AllowedOrigins": [
            "*"
        ],
        "ExposeHeaders": [
            "Access-Control-Allow-Origin"
        ]
    }
]

我错过了什么吗？