I just went through a similar process with ELB. Unfortunately, ELB does not support ECDHE so if you want to use perfect forward secrecy, DHE is your only availa

I just went through a similar process with ELB. Unfortunately, ELB does not support ECDHE so if you want to use perfect forward secrecy, DHE is your only available option there and it is much slower than ECDHE. I switched to using stud to resolve SSL so that we could enable ECDHE. stud: https://github.com/bumptech/stud https://github.com/bumptech/stud