You can control the Download by configuring the following header:
The following methods are supported to control your signed URL redirects:
None: Direct download occurs without signedUrl redirect.
S3: Downloads occur from S3 even if CloudFront exists.
CF (CloudFront): Downloads occur from CloudFront if it’s available. By default, if CloudFront is configured, and is a valid binary provider, it should download from it.