UPDATE 2024 Use ALB attributes to achieve this - esp for security headers
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/header-modification.html