A company hosts a dynamic web application on two Amazon EC2 instances. The company’s SSL certificate is on each instance for SSL termination. Increased traffic has caused SSL encryption/decryption to max out the web servers’ compute capacity. What should a solutions architect do to improve application performance?

The correct solution offloads SSL termination to an Application Load Balancer (ALB). ALBs are designed for high-performance SSL/TLS processing, freeing up EC2 instance compute capacity for application logic. Importing the existing SSL certificate into AWS Certificate Manager (ACM) centralizes certificate management and allows the ALB to easily use it. Creating a new ACM certificate and installing it on instances doesn't offload the SSL processing. Migrating the certificate to S3 is incorrect; S3 is object storage and cannot perform SSL termination. Creating another EC2 instance as a proxy server would introduce another single point of failure and still consume EC2 compute for SSL, which is less efficient than using a managed service like ALB.