The zone for monstermarket.example is live, and the apex is an alias to the load balancer market-alb, which only has an HTTP listener on port 80 so far. Its security group is alb-sg.

1. Keep the zone's id in ZONE, the load balancer's ARN in LB and web-tg's in TG.
2. Get an issued certificate that covers both monstermarket.example and www.monstermarket.example. Keep its ARN in CERT.
3. Serve https://monstermarket.example/ from the load balancer with that certificate, forwarding to web-tg.
4. Try curl https:// with the load balancer's own DNS name, and read the error.
5. Visitors who arrive over HTTP must be sent to HTTPS. Check it with curl -sIL.
6. Answer the question about certificates and regions.