Solution B — EC2 + Nginx + ALB + ACM + Route53
Amazon Linux 2023, IMDSv2
TLS termination, HTTP→HTTPS
Static file serving, gzip
Managed TLS certificate
Private subnets, security groups
No SSH — secure management
Deployed: