AWS adding load balancer and autoscaling to existing https instance using let's encrypt

Question

I have an existing EC2 instance running Apache2 where I set https on, using let's encrypt service. Now I'd like to create an autoscaling group (with 1 to 3 of these instances) and a load balancer and I'd like to keep my https certificate.

Which is the best way to do that?

Answer 1

If the SSL certificate is going to be installed on each EC2 instance, then you can just setup port 443 on the load balancer as a TCP listener, and it will pass the traffic on port 443 directly to the instance, where the SSL certificate will be served.

Note that this is going to require Let's Encrypt be working on each instance that gets created. It will really be easier for you to get a new (free) certificate via the AWS ACM service, and install that on the load balancer.