You will host a public website on EC2 behind a load balancer and secure it with ACM certificates. The load balancer must automatically redirect HTTP traffic to HTTPS. Which configuration meets these requirements?

The correct configuration involves an Application Load Balancer (ALB) because it supports HTTP/HTTPS listeners and content-based routing, including redirects. An HTTP listener on port 80 handles incoming unencrypted traffic, and an HTTPS listener on port 443, with the ACM certificate attached, handles secure traffic. A redirect rule on the HTTP listener then automatically forwards all port 80 requests to the HTTPS listener on port 443, ensuring all traffic is encrypted. Incorrect options: An ALB with a single HTTPS listener on port 80 would not accept unencrypted HTTP traffic, preventing the redirect. TCP listeners on an ALB or Network Load Balancer (NLB) operate at Layer 4 and cannot inspect HTTP headers to perform HTTP-to-HTTPS redirects. NLBs also do not integrate directly with ACM for SSL termination at the load balancer level in the same way ALBs do for HTTPS listeners.