@Andres.Aulasneo lets catch up offline. i think i can help but i’m not 100% certain and so i don’t want to accidentally lead anyone astray in this thread by leaving incorrect info.
Actually the problem of grading SCORM was not only a CORS issue, but the way it is embedded from an external site like S3. I was able to fix it based on a discussion in Slack by creating a Tutor plugin for SCORM in S3. Just in case someone else comes to this, the readme has more details of the problem and alternatives.
I took a look at Tutor plugin for SCORM in S3 . It’s similar to an addition we recently made to tutor-contrib-k8s-deploy-tasks/, a project maintained by cookiecutter-openedx that deals with small nuances of this nature when deploying to Kubernetes rather than directly to an Ubuntu instance.