A proxy using fpassthru needs to be done as suggested by @AD7six as follows:
$handle = @fopen('file path or in this case url to file on S3', 'rb');
header('Cache-Control: no-cache, must-revalidate');
header('Pragma: no-cache'); //keeps ie happy
header('Content-Disposition: attachment; filename=app.ipa');
header('Content-type: application/octet-stream');
header('Content-Length: '.$fileInfo['size']); // taken from a previous S3 API call to get object info
header('Content-Transfer-Encoding: binary');
ob_end_clean(); // apparently very important for bigger files
fpassthru($handle); // proxy stream file through your server
exit();