diff --git a/docs/core/event_handler/api_gateway.md b/docs/core/event_handler/api_gateway.md
index e9b15bf8c00..6868ce25d46 100644
--- a/docs/core/event_handler/api_gateway.md
+++ b/docs/core/event_handler/api_gateway.md
@@ -573,8 +573,8 @@ As a practical example, let's refactor our correlation ID middleware so it accep
 
 These are native middlewares that may become native features depending on customer demand.
 
-| Middleware                                                                                           | Purpose                                                                                                                                 |
-| ---------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
+| Middleware                                                                                                                | Purpose                                                                                                                                 |
+| ------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
 | [SchemaValidationMiddleware](/lambda/python/latest/api/event_handler/middlewares/schema_validation.html){target="_blank"} | Validates API request body and response against JSON Schema, using [Validation utility](../../utilities/validation.md){target="_blank"} |
 
 #### Being a good citizen
@@ -648,15 +648,15 @@ You can compress with gzip and base64 encode your responses via `compress` param
 
 ### Binary responses
 
+???+ warning "Amazon API Gateway does not support `*/*` binary media type [when CORS is also configured](https://github.com/aws-powertools/powertools-lambda-python/issues/3373#issuecomment-1821144779){target='blank'}."
+    This feature requires API Gateway to configure binary media types, see [our sample infrastructure](#required-resources) for reference.
+
 For convenience, we automatically base64 encode binary responses. You can also use in combination with `compress` parameter if your client supports gzip.
 
 Like `compress` feature, the client must send the `Accept` header with the correct media type.
 
-???+ warning
-    This feature requires API Gateway to configure binary media types, see [our sample infrastructure](#required-resources) for reference.
+!!! note "Lambda Function URLs handle binary media types automatically."
 
-???+ note
-    Lambda Function URLs handle binary media types automatically.
 === "binary_responses.py"
 
     ```python hl_lines="17 23"
diff --git a/examples/event_handler_rest/sam/micro_function_template.yaml b/examples/event_handler_rest/sam/micro_function_template.yaml
index dbde5c0e125..bd431dbf1b1 100644
--- a/examples/event_handler_rest/sam/micro_function_template.yaml
+++ b/examples/event_handler_rest/sam/micro_function_template.yaml
@@ -1,21 +1,25 @@
-AWSTemplateFormatVersion: '2010-09-09'
+AWSTemplateFormatVersion: "2010-09-09"
 Transform: AWS::Serverless-2016-10-31
 Description: >
     micro-function-example
 
 Globals:
-  Api:
-    TracingEnabled: true
-    Cors: # see CORS section
-      AllowOrigin: "'https://example.com'"
-      AllowHeaders: "'Content-Type,Authorization,X-Amz-Date'"
-      MaxAge: "'300'"
-    BinaryMediaTypes: # see Binary responses section
-      - "*~1*" # converts to */* for any binary type
+    Api:
+        TracingEnabled: true
+        Cors: # see CORS section
+            AllowOrigin: "'https://example.com'"
+            AllowHeaders: "'Content-Type,Authorization,X-Amz-Date'"
+            MaxAge: "'300'"
+        BinaryMediaTypes: # see Binary responses section
+            - "*~1*" # converts to */* for any binary type
+            # NOTE: use this stricter version if you're also using CORS; */* doesn't work with CORS
+            # see: https://github.com/aws-powertools/powertools-lambda-python/issues/3373#issuecomment-1821144779
+            # - "image~1*" # converts to image/*
+            # - "*~1csv" # converts to */csv, eg text/csv, application/csv
 
-  Function:
-    Timeout: 5
-    Runtime: python3.11
+    Function:
+        Timeout: 5
+        Runtime: python3.11
 
 Resources:
     # Lambda Function Solely For /users endpoint
diff --git a/examples/event_handler_rest/sam/template.yaml b/examples/event_handler_rest/sam/template.yaml
index 41001011a56..67000a39122 100644
--- a/examples/event_handler_rest/sam/template.yaml
+++ b/examples/event_handler_rest/sam/template.yaml
@@ -11,9 +11,14 @@ Globals:
       MaxAge: "'300'"
     BinaryMediaTypes: # see Binary responses section
       - "*~1*" # converts to */* for any binary type
+      # NOTE: use this stricter version if you're also using CORS; */* doesn't work with CORS
+      # see: https://github.com/aws-powertools/powertools-lambda-python/issues/3373#issuecomment-1821144779
+      # - "image~1*" # converts to image/*
+      # - "*~1csv" # converts to */csv, eg text/csv, application/csv
+
   Function:
     Timeout: 5
-    Runtime: python3.9
+    Runtime: python3.11
     Tracing: Active
     Environment:
       Variables: