A public website is hosted behind an Application Load Balancer that currently only has an HTTP listener on port 80. You have a validated public certificate for www.example.com in ACM. Existing users must continue to use the same endpoint, but all traffic between clients and the ALB needs to be encrypted. Which set of actions should you take?

The correct approach is to redirect HTTP traffic to HTTPS while enabling HTTPS. Configuring the HTTP listener on port 80 to redirect to HTTPS (port 443) ensures all client traffic is encrypted, meeting the requirement. Adding an HTTPS listener on port 443 with the ACM certificate and forwarding to the existing target group completes the setup. Option 1 is incorrect because it doesn't redirect HTTP traffic, leaving unencrypted access possible. Option 2 is incorrect because removing the HTTP listener on port 80 would break existing unencrypted links and prevent automatic redirection for users who type http://. Option 3 is incorrect because you cannot attach an SSL certificate directly to an HTTP listener; certificates are for HTTPS listeners.