woff2 continues to be blocked by CORS despite inclusion in CORS policy

CURRENTLY

We have the following section at the very top of our wordpress-vhosts.conf file:

# Set CORS - Added by Alex M on 15 July 2021
  <FilesMatch "\.(ttf|ttc|otf|eot|woff|woff2|webmanifest|font.css)$">
    <IfModule mod_headers.c>
      Header set Access-Control-Allow-Origin "*"
    </IfModule>
  </FilesMatch>
  # End Set CORS

But it seems that .woff2 files continues to be blocked:

Access to font at ‘https://questcoffee.com.au/wp-content/themes/azuma/fontawesome/webfonts/fa-solid-900.woff2’ from origin ‘https://www.questcoffee.com.au’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

In our CloudFront distribution, we have both questcoffee.com.au and https://www.questcoffee.com.au setup as Origin domains.

Help would be appreciated!

The page I need help with: [log in to see the link]