I’m working on a new site for my employer and have set up a Lightsail instance running on Cloudfront. Trying to set up the normal load balancer along with SSL has created issues with the health watch. The best resource I found to alleviate the issue was found here. It’s using LetsEncrypt, so remember you have to renew the certs every 90 days.