You would like your Elastic Beanstalk environment to expose an HTTPS endpoint instead of an HTTP
endpoint in order to get in-flight encryption between your clients and your web servers. What
must be done to setup HTTPS on Beanstalk?
Correct answer - "Create an .ebextension file to configure the Load Balancer" : Example
.ebextensions/securelistener-alb.config
Use this example when your environment has an Application Load Balancer. The example uses options
in the aws:elbv2:listener namespace to configure an HTTPS listener on port 443 with the
specified certificate. The listener routes traffic to the default process.
Incorrect answers -
"Use a separate CloudFormation template to load the SSL certificate onto the Load Balancer" - A
separate CloudFormation template won't be able to mutate the state of a Load Balancer managed by
Elastic Beanstalk
"Open up the port 80 for the security group" - Port 80 is for HTTP traffic
"Configure Health Checks" - Health Checks are unrelated to SSL certificates