alb.createListener("blah", { 
  port: 443, 
  protocol: "HTTPS", 
  external: true, 
  defaultAction: { 
    type: "forward", 
    targetGroupArn: "your target group arn here" 
  }, 
  certificateArn: "your certificate arn here"
});