We decided to go with a different provider but still using Cloudflare for caching in front of the S3 object storage, costs more though.

Originally attempted to modify the code for this. However, some ACL things were baked right into the dependencies and from my rudimentary knowledge, it looked like the way forward was to fork the dependencies.

I wasn't excited about the prospect, so I then looked at setting up a reverse HTTPS proxy that would strip the HTTP headers we didn't want. It almost worked, except the API wanted responses back; so, I stubbed some resposnes and then it got too complicated when not all stubbed responses worked quite right.

It's not really a bug, but it would have been nice if Cloudflare just didn't throw any errors and just did enough to pretend/mock it supported those headers instead of throwing blatant error messages.