Create a self signed cert for grafana, or put in behind an alb- Ec2

Hi All,
Hope you are doing well. I have Grafana and Influx DB running in their own docker containers on my Ec2 instances. This whole flow works fine but I had to set up an inbound rule for all traffic on my ec2 instance for checking graham metrics via the UI.

I was wondering if I can make it more secure and put it behind an ALB or create a self signed cert for the same. Any ideas as to how I can implement this? Thanks!!