ALB mTLS only on selected endpoints

Enabling mTLS selectively for specific endpoints would rely on configuring listener rules that direct traffic based on the request path or host header to different target groups. While the ALB's mTLS feature is designed to authenticate client certificates at the listener level, the specificity of applying mTLS to certain endpoints may need to be managed through application logic or additional proxy layers within your architecture that can inspect and enforce authentication at a more granular level.

For ref: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/configure-mutual-tls-authentication-for-applications-running-on-amazon-eks.html

If this has answered your question or was helpful, accepting the answer would be greatly appreciated. Thank you!