Create a new Amazon-issued certificate in AWS Secrets Manager, export it, and then import it into both the ALB and the EC2 instances.

Create a new Amazon-issued certificate in AWS Certificate Manager (ACM), associate it with the ALB, export it from ACM, and finally install it on the EC2 instances.

Import a new third-party certificate into AWS Identity and Access Management (IAM), export it from IAM, and then associate it with both the ALB and the EC2 instances.

Import a new third-party certificate into AWS Certificate Manager (ACM), associate it with the ALB, and then install it on the EC2 instances.