Your problem is most likely: the listening port or security group configuration does not match. Although the target group is healthy, the actual requested port/protocol when the ALB forwards is incorrect, or the instance only listens on localhost