Bringing your idea to life and in front of billions of eyes

I want to configure HTTPS for my AWS Elastic Beanstalk environment so that I can encrypt data from my load balancer to my Amazon Elastic Compute Cloud (Amazon EC2) instance.

Resolution: if you purchase a domain name and want to configure https for your application. your application will be hosted on an elastic bean stalk. If you don't own a domain name, you can still use HTTPS with a self-signed certificate for development and testing purposes.

AWS Certificate Manager (ACM) is the recommended tool for provisioning, managing, and deploying your server certificates programmatically. You can also use the AWS Command Line Interface (AWS CLI). If ACM isn't available in your AWS Region, you can upload a third-party or self-signed certificate and private key to AWS Identity and Access Management (IAM) using the AWS CLI.

 prepare your elastic bean stalk environment and with advance configuring option create new key pair and select load balanced environment .so when load balanced on it will create application load balancer at server side.

 Create an alias name if your environment's URL includes an AWS Region, or create a CNAME record if your environment's URL doesn't include an AWS Region. 

create session with CLI and go for server.xml and for ward your code and add in engine section below code

<Valve className="org.apache.catalina.valves.RemoteIpValve" remoteIpHeader="x-forwarded-for" protocolHeader="x-forwarded-proto" protocolHeaderHttpsValue="https" />

 and open connector port for 8443 to 443 .

Terminate HTTPS on the load balancer

1.    Open the Elastic Beanstalk console, and then select your environment.

2.    In the navigation pane, choose Configuration.

3.    In the Load balancer category, choose Modify.

4.    To add the listener for port 443, choose one of the following sets of steps based on the type of load balancer in your Elastic Beanstalk environment.

To add a listener for a Classic Load Balancer:

1.    Choose Add Listener.

2.    For Port, enter the incoming traffic port (typically 443).

3.    For Protocol, choose HTTPS.

4.    For Instance Port, enter 80.

5.    For Instance Protocol, choose HTTP.

6.    For SSL certificate, choose your certificate, and then choose the SSL policy that you want to use from the drop-down menu.

7.    Choose Add, and then choose Apply.

To add a listener for an Application Load Balancer:

1.    Choose Add Listener.

2.    For Port, enter the incoming traffic port (typically 443).

3.    For Protocol, choose HTTPS.

4.    For SSL certificate, choose your certificate, and then choose the SSL policy that you want to use from the drop-down menu.

5.    Choose Add, and then choose Apply.

To add a listener for a Network Load Balancer:

1.    Choose Add Listener.

2.    For Port, enter the incoming traffic port (typically 443).

3.    Choose Add, and then choose Apply.