can be defined in protocol = "TLS" then you can relate it to a certificate from ACM. You must import certs if you own them.

I gave up trying to achieve that TLS termination.

we use 2 load balancers anyway so is ok to use only TCP and forward packets at network layer 4 from OSI