I spent quite some time finding out that I need to modify the Security Group if I want to enable HTTPS on Elastic Beanstalk. I mean on the frontend, not on the EC2 instance. This is nowhere mentioned in Amazon's documentation. They have this nice switch where you can enable HTTPS and specify the port, but in addition I needed to go to the EC2 console -> Security Groups and find out which Security Group is used by which Load Balancer, and which Load Balancer is used by which EB environment.
Is there a way to specify the Security Group for an Elastic Beanstalk environment? If not, will the load balancer "survive" a rebuilding of the environment or will I need to repeat configuring the ports if the environment is rebuilt?
What's your best practice? Thanks!