Randy,
CORS is configured at the Stream Target. This Wowza Cloud article walks you through creating a new stream target where you can configure the CORS to be enabled for playback. There are other areas addressed in this article, but know that it does address adding CORS as well.
I hope this helps.
Regards,
Mac