Hi Nick, you could add an ALB in front of your instance, though for a single instance and just for SSL certificate it might be overkill.
Have a look at my other article about running a multi-node Typesense, it uses a Load Balancer blog.stefanolaru.com/how-to-run-highly-available-…
Another (free) option would be to install Nginx which will handle the SSL termination and proxy to Typesense. But it's very likely possible to manage this directly from Typesense ...