Can someone provide the appropriate security architecture and setup for the following setup?
- PHP app via AWS Beanstalk
- Let's say its IP is 10.10.10.01
- Existing website
- No TLS/SSL currently
- A record created to point subdomain "myapp" to IP 10.10.10.01 (Beanstalk app)
Given the scenario of someone needing to post data to "myapp.mysite.com", which is just reading from the AWS Beanstalk PHP app, how should the TLS/SSL be configured?
I.e. A certificate should be created for myapp.mysite.com and the 443 port on the Beanstalk app should be opened.
Hope I explained this well enough and thanks for your help in advance.