[Task]: Enable HTTPs Redirect for API

[acouch]

Summary

This might be close once we implement #906.

NIST-800 53 requires Application Load Balancer should be configured to redirect all HTTP requests to HTTPS. The current API in dev does not have HTTPS enabled.

Acceptance criteria

• ELB.1 check passes

[coilysiren]

I'm +1 on letting this wait until we get the proper API URLs, eg. #906

[coilysiren]

POAM:

• add "no index" and related functionality to our dev build, so the general public doesn't stumble onto our dev site link
• add a DNS CNAME that points to our dev load balancers, like beta.grants.gov used to
• configure TLS for that dev site, either a CA cert or a self signed one
• configure the load balancer to redirect HTTP to HTTPS

[coilysiren]

This is blocked because we need a HTTPS URL to redirect to.

[coilysiren]

Blocked by #906

[acouch]

This is done:

$curl http://api.simpler.grants.gov/ -I
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 19 Mar 2024 18:22:21 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://api.simpler.grants.gov:443/