Just posting this in case anyone else has problems with getting AWS Lambdas to send CORS headers when using SAM. I spent a few hours before eventually getting it to work.