diff --git a/spf-api/serverless.yml b/spf-api/serverless.yml
index 6fc3920..20fa40f 100644
--- a/spf-api/serverless.yml
+++ b/spf-api/serverless.yml
@@ -257,6 +257,15 @@ resources:
             MinimumProtocolVersion: TLSv1.2_2018
             SslSupportMethod: sni-only
           DefaultCacheBehavior:
+            # must allow all methods in order to allow posts from Azure to SPF API via cloudfront distribution URL
+            AllowedMethods:
+            - DELETE
+            - GET
+            - HEAD
+            - OPTIONS
+            - PATCH
+            - POST
+            - PUT
             TargetOriginId: OriginSPFAPI${self:provider.stage}
             ViewerProtocolPolicy: 'redirect-to-https'
             DefaultTTL: 31536000