ALB Setup with ACM SSL

I need you to configure an AWS Application Load Balancer that terminates HTTPS traffic using an AWS Certificate Manager-issued certificate. The domain is already validated in ACM, so no additional DNS work is necessary on your side.

Scope of work
• Create or fine-tune the ALB, target group(s), listeners, and security groups so traffic is routed over 443 with TLS 1.2+ and cleanly forwarded to my existing EC2 instances.
• Redirect or block port 80 as appropriate, ensuring every call is served over HTTPS.
• Confirm health checks, sticky sessions (if required), and logging to S3 are enabled.
• Walk me through any tags, IAM permissions, or CloudWatch alarms you add so I can maintain them later.

Acceptance criteria
1. SSL certificate issued by ACM is actively served by the ALB without warnings in major browsers.
2. All backend targets show healthy and receive traffic.
3. A short write-up or screen share demonstrates the configuration and where to make future edits.

You’re free to work in the AWS Console, AWS CLI, or IaC tools such as CloudFormation or Terraform—as long as the final state in my account matches the criteria above.