What should a solutions architect do to meet this requirement?
Update the ALB’s network ACL to accept only HTTPS traffic.
Create a rule that replaces the HTTP in the URL with HTTPS.
Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.
Replace the ALB with a Network Load Balancer configured to use Server Name Indication (SNI).
Explanations:
Updating the ALB’s network ACL to accept only HTTPS traffic does not forward HTTP requests to HTTPS; it merely blocks HTTP traffic.
Creating a rule that replaces “HTTP” in the URL with “HTTPS” is not a valid operation for an ALB and won’t redirect traffic effectively.
Creating a listener rule on the ALB to redirect HTTP traffic to HTTPS is the correct approach, as it ensures that all incoming HTTP requests are redirected to HTTPS.
Replacing the ALB with a Network Load Balancer configured to use SNI does not address the requirement of redirecting HTTP traffic to HTTPS; it focuses on handling SSL connections rather than redirection.
From what I’ve seen, the answer is:
Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.