You can now access Private (Internal) Application Load Balancers via CloudFront with the newly introduced VPC Origins.

In the CloudFront console:

• Create a VPC Origin with and add ARN of your ALB (or EC2) as Origin.
• Add this as Origin to you CloudFront Distribution.

Your ALB (and hence the Beanstalk) will now be accessible via your CF Distribution.