Visiting https://www.minecraft.net/en-us/profile/skin and changing the skin results in 403 response, which then causes a cors error:

The response has no body and these headers:

on a slightly related note, api requests using 3rd party services seems to get blocked by cloudfront with " Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner."