The Mender server utilizes S3 API to generate a presigned Object URL, and this URL is provided to the client.
As far as I know there is no configuration option to tell the client to use a cloudfrount URL, but it is also unclear to me if it even would work with presigned Object URLs if there was.