I think the usual approach is to proxy the other domain (or subdomain) to a path on your user-facing domain. E.g. if mysite.com is making requests to api.mysite.com, you would proxy api.mysite.com to mysite.com/api.
That said, it would be cool if static hosting services like S3 offered CORS proxies for uses like this. I wonder if that's a thing.