https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-verify-jwt.html
ALB will validate the token signature and requires two mandatory claims: 'iss' (issuer) and 'exp' (expiration). Additionally, if present in the token, ALB will also validate 'nbf' (not before) and 'iat' (issued at time) claims. You can configure up to 10 additional claims for validation.
These claims support three formats:
🔹 Single-string: A single text value
🔹 Space-separated values: Multiple values separated by spaces (maximum 10 values)
🔹 String-array: An array of text values (maximum 10 values)
If the token is valid, the load balancer forwards the request with token as is to the target. Otherwise, it rejects the request.
#ALB