Use AWS LoadBalancer V2 to redirect traffic.

aws-redirect-service.yaml

---

Resources:
  SecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: Allow http to client host
      VpcId: "vpc-1"
      SecurityGroupIngress:
      - IpProtocol: tcp
        FromPort: 80
        ToPort: 80
        CidrIp: 0.0.0.0/0

  PublicLoadBalancerBackend:
    Type: AWS::ElasticLoadBalancingV2::LoadBalancer
    Properties:
      Name: "redirectlb"
      Scheme: "internet-facing"
      SecurityGroups:
        - !Ref SecurityGroup
      Subnets:
        - "subnet-az1"
        - "subnet-az2"

  PublicLoadBalancerHttpRedirectListener:
    Type: AWS::ElasticLoadBalancingV2::Listener
    DependsOn:
      - PublicLoadBalancerBackend
    Properties:
      DefaultActions:
        # https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_RedirectActionConfig.html
        - RedirectConfig:
            Host: "some.random.fqdn" # "#{host}"
            Path: "/path" # "#{path}"
            Port: 80 # 443
            Protocol: "HTTP" # "HTTPS"
            Query: "test=1" # #{query}"
            StatusCode: HTTP_301
          Type: redirect
      LoadBalancerArn: !Ref 'PublicLoadBalancerBackend'
      Port: 80
      Protocol: HTTP