The configuration of static.crates.io includes Origin header into cache key. If it’s for CORS support, might be worth looking into enabling CORS on CloudFront and Fastly natively.
Why?
Most likely we include that header in cache key and forward it to S3 so that S3 would do a CORS handling for us, but you can move this handling to CloudFront and Fastly and reduce cache key duplication, reducing the load on S3.