Adding SSL/TLS Certificate

Certificate Verification

Request a new certificate on ACM

Create a CNAME in your DNS settings

Your certificate will change from "pending" to "issued"

Allow HTTPS traffic to ALB

Update security group of ALB (allow 443)

Add listener 443 to ALB, attach the SSL/TLS certificate that you have created in previous step, and forward it to Target Group (not Default Group)

Redirect HTTP to HTTPS

Update 2 listener rules on port 80, redirect them to 443