diff --git a/modules/perforce/examples/complete/dns.tf b/modules/perforce/examples/complete/dns.tf
index a3d9a107..4bfb1241 100644
--- a/modules/perforce/examples/complete/dns.tf
+++ b/modules/perforce/examples/complete/dns.tf
@@ -1,4 +1,3 @@
-
 ##########################################
 # Route53 Hosted Zone for FQDN
 ##########################################
@@ -8,10 +7,10 @@ data "aws_route53_zone" "root" {
 }
 
 ##########################################
-# Perforce Helix DNS
+# Perforce DNS
 ##########################################
-resource "aws_route53_zone" "helix_private_zone" {
-  name = "helix.perforce.internal"
+resource "aws_route53_zone" "perforce_private_hosted_zone" {
+  name = "perforce.${data.aws_route53_zone.root.name}"
   #checkov:skip=CKV2_AWS_38: Hosted zone is private (vpc association)
   #checkov:skip=CKV2_AWS_39: Query logging disabled by design
   vpc {
@@ -19,54 +18,56 @@ resource "aws_route53_zone" "helix_private_zone" {
   }
 }
 
-
-resource "aws_route53_record" "helix_swarm" {
+# Route all external web service traffic to the NLB
+resource "aws_route53_record" "external_perforce_web_services" {
   zone_id = data.aws_route53_zone.root.id
-  name    = "swarm.helix.${data.aws_route53_zone.root.name}"
+  name    = "*.perforce.${data.aws_route53_zone.root.name}"
   type    = "A"
   alias {
-    name                   = module.perforce_helix_swarm.alb_dns_name
-    zone_id                = module.perforce_helix_swarm.alb_zone_id
+    name                   = aws_lb.perforce.dns_name
+    zone_id                = aws_lb.perforce.zone_id
     evaluate_target_health = true
   }
 }
 
-resource "aws_route53_record" "helix_authentication_service" {
-  zone_id = data.aws_route53_zone.root.zone_id
-  name    = "auth.helix.${data.aws_route53_zone.root.name}"
+# Route all internal web service traffic to the ALB
+resource "aws_route53_record" "internal_perforce_web_services" {
+  zone_id = aws_route53_zone.perforce_private_hosted_zone.id
+  name    = "*.${aws_route53_zone.perforce_private_hosted_zone.name}"
   type    = "A"
   alias {
-    name                   = module.perforce_helix_authentication_service.alb_dns_name
-    zone_id                = module.perforce_helix_authentication_service.alb_zone_id
+    name                   = aws_lb.perforce_web_services.dns_name
+    zone_id                = aws_lb.perforce_web_services.zone_id
     evaluate_target_health = true
   }
 }
 
-resource "aws_route53_record" "perforce_helix_core" {
+# Route all external Helix Core traffic to the NLB
+resource "aws_route53_record" "external_helix_core" {
   zone_id = data.aws_route53_zone.root.zone_id
-  name    = "core.helix.${data.aws_route53_zone.root.name}"
+  name    = "perforce.${data.aws_route53_zone.root.name}"
   type    = "A"
-  ttl     = 300
-  #checkov:skip=CKV2_AWS_23:The attached resource is managed by CGD Toolkit
-  records = [module.perforce_helix_core.helix_core_eip_public_ip]
+  alias {
+    name                   = aws_lb.perforce.dns_name
+    zone_id                = aws_lb.perforce.zone_id
+    evaluate_target_health = true
+  }
 }
 
-resource "aws_route53_record" "perforce_helix_core_pvt" {
-  zone_id = aws_route53_zone.helix_private_zone.zone_id
-  name    = "core.${aws_route53_zone.helix_private_zone.name}"
+# Route all internal Helix Core traffic to the instance
+resource "aws_route53_record" "internal_helix_core" {
+  zone_id = aws_route53_zone.perforce_private_hosted_zone.zone_id
+  name    = aws_route53_zone.perforce_private_hosted_zone.name
   type    = "A"
-  ttl     = 300
-  #checkov:skip=CKV2_AWS_23:The attached resource is managed by CGD Toolkit
-  records = [module.perforce_helix_core.helix_core_eip_private_ip]
+  records = [module.perforce_helix_core.helix_core_private_ip]
 }
 
 ##########################################
 # Helix Certificate Management
 ##########################################
-
-resource "aws_acm_certificate" "helix" {
-  domain_name               = "helix.${var.root_domain_name}"
-  subject_alternative_names = ["*.helix.${var.root_domain_name}"]
+resource "aws_acm_certificate" "perforce" {
+  domain_name               = "perforce.${var.root_domain_name}"
+  subject_alternative_names = ["*.perforce.${var.root_domain_name}"]
 
   validation_method = "DNS"
 
@@ -79,9 +80,9 @@ resource "aws_acm_certificate" "helix" {
   }
 }
 
-resource "aws_route53_record" "helix_cert" {
+resource "aws_route53_record" "perforce_cert" {
   for_each = {
-    for dvo in aws_acm_certificate.helix.domain_validation_options : dvo.domain_name => {
+    for dvo in aws_acm_certificate.perforce.domain_validation_options : dvo.domain_name => {
       name   = dvo.resource_record_name
       record = dvo.resource_record_value
       type   = dvo.resource_record_type
@@ -96,10 +97,10 @@ resource "aws_route53_record" "helix_cert" {
   zone_id         = data.aws_route53_zone.root.id
 }
 
-resource "aws_acm_certificate_validation" "helix" {
+resource "aws_acm_certificate_validation" "perforce" {
   timeouts {
     create = "15m"
   }
-  certificate_arn         = aws_acm_certificate.helix.arn
-  validation_record_fqdns = [for record in aws_route53_record.helix_cert : record.fqdn]
+  certificate_arn         = aws_acm_certificate.perforce.arn
+  validation_record_fqdns = [for record in aws_route53_record.perforce_cert : record.fqdn]
 }
diff --git a/modules/perforce/examples/complete/main.tf b/modules/perforce/examples/complete/main.tf
index 68170d3a..be1220c3 100644
--- a/modules/perforce/examples/complete/main.tf
+++ b/modules/perforce/examples/complete/main.tf
@@ -28,21 +28,27 @@ resource "aws_ecs_cluster_capacity_providers" "providers" {
 ##########################################
 
 module "perforce_helix_core" {
-  source                = "../../helix-core"
-  vpc_id                = aws_vpc.perforce_vpc.id
-  server_type           = "p4d_commit"
-  instance_subnet_id    = aws_subnet.public_subnets[0].id
-  instance_type         = "c6g.large"
-  instance_architecture = "arm64"
-
-  storage_type         = "EBS"
-  depot_volume_size    = 64
-  metadata_volume_size = 32
-  logs_volume_size     = 32
+  source = "../../helix-core"
 
+  # Networking
+  vpc_id                      = aws_vpc.perforce_vpc.id
+  instance_subnet_id          = aws_subnet.private_subnets[0].id
+  internal                    = true
   fully_qualified_domain_name = "core.helix.perforce.${var.root_domain_name}"
 
-  helix_authentication_service_url = "https://${aws_route53_record.helix_authentication_service.name}"
+
+  # Compute and Storage
+  instance_type         = "c8g.large"
+  instance_architecture = "arm64"
+  storage_type          = "EBS"
+  depot_volume_size     = 64
+  metadata_volume_size  = 32
+  logs_volume_size      = 32
+
+  # Configuration
+  plaintext                        = true # We will use the Perforce NLB to handle TLS termination
+  server_type                      = "p4d_commit"
+  helix_authentication_service_url = "https://auth.${aws_route53_record.internal_perforce_web_services.name}"
 }
 
 ##########################################
@@ -50,40 +56,179 @@ module "perforce_helix_core" {
 ##########################################
 
 module "perforce_helix_authentication_service" {
-  source                                   = "../../helix-authentication-service"
-  vpc_id                                   = aws_vpc.perforce_vpc.id
-  cluster_name                             = aws_ecs_cluster.perforce_cluster.name
-  helix_authentication_service_alb_subnets = aws_subnet.public_subnets[*].id
-  helix_authentication_service_subnets     = aws_subnet.private_subnets[*].id
-  certificate_arn                          = aws_acm_certificate.helix.arn
+  source = "../../helix-authentication-service"
+
+  # Networking
+  vpc_id                               = aws_vpc.perforce_vpc.id
+  create_application_load_balancer     = false # Shared Perforce web services application load balancer
+  helix_authentication_service_subnets = aws_subnet.private_subnets[*].id
+  fully_qualified_domain_name          = "auth.perforce.${var.root_domain_name}"
 
+  # Compute
+  cluster_name = aws_ecs_cluster.perforce_cluster.name
+
+  # Configuration
   enable_web_based_administration = true
-  fully_qualified_domain_name     = "auth.helix.${var.root_domain_name}"
 
-  helix_authentication_service_alb_access_logs_prefix = ""
-  depends_on                                          = [aws_ecs_cluster.perforce_cluster, aws_acm_certificate_validation.helix]
+  depends_on = [aws_ecs_cluster.perforce_cluster]
 }
 
 ##########################################
 # Perforce Helix Swarm
 ##########################################
-
 module "perforce_helix_swarm" {
-  source                      = "../../helix-swarm"
-  vpc_id                      = aws_vpc.perforce_vpc.id
-  cluster_name                = aws_ecs_cluster.perforce_cluster.name
-  helix_swarm_alb_subnets     = aws_subnet.public_subnets[*].id
-  helix_swarm_service_subnets = aws_subnet.private_subnets[*].id
-  certificate_arn             = aws_acm_certificate.helix.arn
-  p4d_port                    = "ssl:${aws_route53_record.perforce_helix_core_pvt.name}:1666"
+  source = "../../helix-swarm"
+
+  # Networking
+  vpc_id                           = aws_vpc.perforce_vpc.id
+  create_application_load_balancer = false # Shared Perforce web services application load balancer
+  helix_swarm_service_subnets      = aws_subnet.private_subnets[*].id
+  fully_qualified_domain_name      = "swarm.perforce.${var.root_domain_name}"
+
+  # Compute
+  cluster_name = aws_ecs_cluster.perforce_cluster.name
+
+  # Configuration
+  p4d_port                    = "${aws_route53_record.internal_helix_core.name}:1666"
   p4d_super_user_arn          = module.perforce_helix_core.helix_core_super_user_username_secret_arn
   p4d_super_user_password_arn = module.perforce_helix_core.helix_core_super_user_password_secret_arn
   p4d_swarm_user_arn          = module.perforce_helix_core.helix_core_super_user_username_secret_arn
   p4d_swarm_password_arn      = module.perforce_helix_core.helix_core_super_user_password_secret_arn
+  enable_sso                  = true
+
+  depends_on = [aws_ecs_cluster.perforce_cluster]
+}
+
+##########################################
+# Perforce Network Load Balancer
+##########################################
+resource "aws_lb" "perforce" {
+  name                             = "perforce"
+  load_balancer_type               = "network"
+  subnets                          = aws_subnet.public_subnets[*].id
+  security_groups                  = [aws_security_group.perforce_network_load_balancer.id]
+  drop_invalid_header_fields       = true
+  enable_cross_zone_load_balancing = true
+  #checkov:skip=CKV_AWS_91: Access logging not required for example deployment
+  #checkov:skip=CKV_AWS_150: Load balancer deletion protection disabled for example deployment
+}
 
-  enable_sso = true
+###################################################
+# Perforce Web Services Application Load Balancer
+###################################################
+resource "aws_lb" "perforce_web_services" {
+  name                       = "perforce-web-services"
+  load_balancer_type         = "application"
+  subnets                    = aws_subnet.private_subnets[*].id
+  internal                   = true
+  security_groups            = [aws_security_group.perforce_web_services_alb.id]
+  drop_invalid_header_fields = true
+  #checkov:skip=CKV_AWS_91: Access logging not required for example deployment
+  #checkov:skip=CKV_AWS_150: Load balancer deletion protection disabled for example deployment
+}
 
-  fully_qualified_domain_name = "swarm.helix.${var.root_domain_name}"
+##########################################
+# Helix Core Target Group
+##########################################
+resource "aws_lb_target_group" "helix_core" {
+  name        = "helix-core"
+  target_type = "instance"
+  port        = 1666
+  protocol    = "TCP"
+  vpc_id      = aws_vpc.perforce_vpc.id
+}
 
-  depends_on = [aws_ecs_cluster.perforce_cluster, aws_acm_certificate_validation.helix]
+resource "aws_lb_target_group_attachment" "helix_core" {
+  target_group_arn = aws_lb_target_group.helix_core.arn
+  target_id        = module.perforce_helix_core.helix_core_instance_id
+  port             = 1666
+}
+
+##########################################
+# Web Services Target Group
+##########################################
+resource "aws_lb_target_group" "perforce_web_services" {
+  name        = "perforce-web-services"
+  target_type = "alb"
+  port        = 443
+  protocol    = "TCP"
+  vpc_id      = aws_vpc.perforce_vpc.id
+}
+
+# Default rule redirects to Helix Swarm
+resource "aws_lb_listener" "perforce_web_services" {
+  load_balancer_arn = aws_lb.perforce_web_services.arn
+  port              = 443
+  protocol          = "HTTPS"
+  ssl_policy        = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  certificate_arn   = aws_acm_certificate_validation.perforce.certificate_arn
+
+  default_action {
+    type = "redirect"
+    redirect {
+      host        = "swarm.perforce.${var.root_domain_name}"
+      port        = "443"
+      protocol    = "HTTPS"
+      status_code = "HTTP_301"
+    }
+  }
+}
+
+# Helix Swarm listener rule
+resource "aws_lb_listener_rule" "perforce_helix_swarm" {
+  listener_arn = aws_lb_listener.perforce_web_services.arn
+  priority     = 100
+  action {
+    type             = "forward"
+    target_group_arn = module.perforce_helix_swarm.target_group_arn
+  }
+  condition {
+    host_header {
+      values = ["swarm.perforce.${var.root_domain_name}"]
+    }
+  }
+}
+
+# Helix Authentication Service listener rule
+resource "aws_lb_listener_rule" "perforce_helix_authentication_service" {
+  listener_arn = aws_lb_listener.perforce_web_services.arn
+  priority     = 200
+  action {
+    type             = "forward"
+    target_group_arn = module.perforce_helix_authentication_service.target_group_arn
+  }
+  condition {
+    host_header {
+      values = ["auth.perforce.${var.root_domain_name}"]
+    }
+  }
+}
+
+##########################################
+# Helix Core Listener
+##########################################
+resource "aws_lb_listener" "helix_core" {
+  load_balancer_arn = aws_lb.perforce.arn
+  port              = 1666
+  protocol          = "TLS"
+  ssl_policy        = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  certificate_arn   = aws_acm_certificate_validation.perforce.certificate_arn
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.helix_core.arn
+  }
+}
+
+##########################################
+# Perforce Web Services Listener
+##########################################
+resource "aws_lb_listener" "perforce_web_services_alb" {
+  load_balancer_arn = aws_lb.perforce_web_services.arn
+  port              = 443
+  protocol          = "TCP"
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.perforce_web_services.arn
+  }
 }
diff --git a/modules/perforce/examples/complete/security.tf b/modules/perforce/examples/complete/security.tf
index a682b045..5a79be38 100644
--- a/modules/perforce/examples/complete/security.tf
+++ b/modules/perforce/examples/complete/security.tf
@@ -1,33 +1,131 @@
 ##########################################
-# Internal Access - service to service
+# Perforce NLB Security Group
 ##########################################
+resource "aws_security_group" "perforce_network_load_balancer" {
+  name        = "perforce_network_load_balancer"
+  description = "Perforce Network Load Balancer"
+  vpc_id      = aws_vpc.perforce_vpc.id
+  #checkov:skip=CKV2_AWS_5:Security group is attached to Perforce NLB
+}
+
+# Egress for Perforce NLB to Helix Core instance
+resource "aws_vpc_security_group_egress_rule" "perforce_nlb_outbound_helix_core" {
+  security_group_id            = aws_security_group.perforce_network_load_balancer.id
+  description                  = "Perforce NLB outbound to Helix Core"
+  from_port                    = 1666
+  to_port                      = 1666
+  ip_protocol                  = "TCP"
+  referenced_security_group_id = module.perforce_helix_core.security_group_id
+}
 
-# Helix Swarm -> Helix Core
-resource "aws_vpc_security_group_ingress_rule" "helix_core_inbound_swarm" {
+# Ingress from Perforce NLB to Helix Core instance
+resource "aws_vpc_security_group_ingress_rule" "perforce_nlb_inbound_helix_core" {
   security_group_id            = module.perforce_helix_core.security_group_id
+  description                  = "Perforce NLB inbound to Helix Core"
   ip_protocol                  = "TCP"
   from_port                    = 1666
   to_port                      = 1666
+  referenced_security_group_id = aws_security_group.perforce_network_load_balancer.id
+}
+
+# Egress for Perforce NLB to Perforce Web Services ALB
+resource "aws_vpc_security_group_egress_rule" "perforce_nlb_outbound_web_alb" {
+  security_group_id            = aws_security_group.perforce_network_load_balancer.id
+  description                  = "Perforce NLB outbound to Web ALB"
+  from_port                    = 443
+  to_port                      = 443
+  ip_protocol                  = "TCP"
+  referenced_security_group_id = aws_security_group.perforce_web_services_alb.id
+}
+
+##########################################
+# Perforce Web Services ALB Security Group
+##########################################
+resource "aws_security_group" "perforce_web_services_alb" {
+  name        = "perforce_web_services_alb"
+  description = "Perforce Web Services ALB"
+  vpc_id      = aws_vpc.perforce_vpc.id
+  #checkov:skip=CKV2_AWS_5:Security group is attached to Perforce Web Services ALB
+}
+
+# HTTPS Ingress from Perforce NLB to Perforce Web Services ALB
+resource "aws_vpc_security_group_ingress_rule" "perforce_nlb_inbound_web_alb_https" {
+  security_group_id            = aws_security_group.perforce_web_services_alb.id
+  description                  = "Perforce NLB inbound HTTPS to Web ALB"
+  ip_protocol                  = "TCP"
+  from_port                    = 443
+  to_port                      = 443
+  referenced_security_group_id = aws_security_group.perforce_network_load_balancer.id
+}
+
+# HTTPS Ingress from Helix Core server (needed for Helix Authentication Service extension)
+resource "aws_vpc_security_group_ingress_rule" "perforce_helix_core_inbound_web_alb_https" {
+  security_group_id            = aws_security_group.perforce_web_services_alb.id
+  description                  = "Helix Core inbound HTTPS to Web ALB"
+  ip_protocol                  = "TCP"
+  from_port                    = 443
+  to_port                      = 443
+  referenced_security_group_id = module.perforce_helix_core.security_group_id
+}
+
+# Egress for Perfoce Web Services ALB to Helix Swarm service
+resource "aws_vpc_security_group_egress_rule" "perforce_alb_outbound_helix_swarm" {
+  security_group_id            = aws_security_group.perforce_web_services_alb.id
+  description                  = "Perforce ALB outbound to Helix Swarm"
+  from_port                    = 80
+  to_port                      = 80
+  ip_protocol                  = "TCP"
   referenced_security_group_id = module.perforce_helix_swarm.service_security_group_id
-  description                  = "Enables Helix Swarm to access Helix Core."
-}
-
-# Helix Core -> Helix Swarm
-resource "aws_vpc_security_group_ingress_rule" "helix_swarm_inbound_core" {
-  security_group_id = module.perforce_helix_swarm.alb_security_group_id
-  ip_protocol       = "TCP"
-  from_port         = 443
-  to_port           = 443
-  cidr_ipv4         = "${module.perforce_helix_core.helix_core_eip_public_ip}/32"
-  description       = "Enables Helix Core to access Helix Swarm"
-}
-
-# Helix Core -> Helix Authentication Service
-resource "aws_vpc_security_group_ingress_rule" "helix_auth_inbound_core" {
-  security_group_id = module.perforce_helix_authentication_service.alb_security_group_id
-  ip_protocol       = "TCP"
-  from_port         = 443
-  to_port           = 443
-  cidr_ipv4         = "${module.perforce_helix_core.helix_core_eip_public_ip}/32"
-  description       = "Enables Helix Core to access Helix Authentication Service"
+}
+
+# Ingress from Perforce Web Services ALB to Helix Swarm service
+resource "aws_vpc_security_group_ingress_rule" "perforce_alb_inbound_helix_swarm" {
+  security_group_id            = module.perforce_helix_swarm.service_security_group_id
+  description                  = "Perforce ALB inbound to Helix Swarm"
+  ip_protocol                  = "TCP"
+  from_port                    = 80
+  to_port                      = 80
+  referenced_security_group_id = aws_security_group.perforce_web_services_alb.id
+  #checkov:skip=CKV_AWS_260:Access restricted to Perforce Web Services ALB
+}
+
+# Egress for Perforce Web Services ALB to Helix Authentication service
+resource "aws_vpc_security_group_egress_rule" "perforce_alb_outbound_helix_auth" {
+  security_group_id            = aws_security_group.perforce_web_services_alb.id
+  description                  = "Perforce ALB outbound to Helix Auth"
+  from_port                    = 3000
+  to_port                      = 3000
+  ip_protocol                  = "TCP"
+  referenced_security_group_id = module.perforce_helix_authentication_service.service_security_group_id
+}
+
+# Ingress from Perforce Web Services ALB to Helix Authentication service
+resource "aws_vpc_security_group_ingress_rule" "perforce_alb_inbound_helix_auth" {
+  security_group_id            = module.perforce_helix_authentication_service.service_security_group_id
+  description                  = "Perforce ALB inbound to Helix Auth"
+  ip_protocol                  = "TCP"
+  from_port                    = 3000
+  to_port                      = 3000
+  referenced_security_group_id = aws_security_group.perforce_web_services_alb.id
+}
+
+##########################################
+# Helix Swarm to Helix Core
+##########################################
+resource "aws_vpc_security_group_ingress_rule" "perforce_helix_core_inbound_helix_swarm" {
+  security_group_id            = module.perforce_helix_core.security_group_id
+  description                  = "Helix Core inbound to Helix Swarm"
+  ip_protocol                  = "TCP"
+  from_port                    = 1666
+  to_port                      = 1666
+  referenced_security_group_id = module.perforce_helix_swarm.service_security_group_id
+}
+
+resource "aws_vpc_security_group_egress_rule" "perforce_helix_swarm_outbound_helix_core" {
+  security_group_id            = module.perforce_helix_swarm.service_security_group_id
+  description                  = "Helix Swarm outbound to Helix Core"
+  from_port                    = 1666
+  to_port                      = 1666
+  ip_protocol                  = "TCP"
+  referenced_security_group_id = module.perforce_helix_core.security_group_id
 }
diff --git a/modules/perforce/helix-authentication-service/README.md b/modules/perforce/helix-authentication-service/README.md
index 1f6fb8b7..8427f888 100644
--- a/modules/perforce/helix-authentication-service/README.md
+++ b/modules/perforce/helix-authentication-service/README.md
@@ -6,8 +6,8 @@
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | 5.76.0 |
-| <a name="requirement_awscc"></a> [awscc](#requirement\_awscc) | 1.20.0 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | 5.78.0 |
+| <a name="requirement_awscc"></a> [awscc](#requirement\_awscc) | 1.22.0 |
 | <a name="requirement_random"></a> [random](#requirement\_random) | 3.6.3 |
 
 ## Providers
@@ -26,45 +26,45 @@ No modules.
 
 | Name | Type |
 |------|------|
-| [aws_cloudwatch_log_group.helix_authentication_service_log_group](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/cloudwatch_log_group) | resource |
-| [aws_ecs_cluster.helix_authentication_service_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_cluster) | resource |
-| [aws_ecs_cluster_capacity_providers.helix_authentication_service_cluster_fargate_providers](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_cluster_capacity_providers) | resource |
-| [aws_ecs_service.helix_authentication_service](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_service) | resource |
-| [aws_ecs_task_definition.helix_authentication_service_task_definition](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_task_definition) | resource |
-| [aws_iam_policy.helix_authentication_service_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_policy) | resource |
-| [aws_iam_policy.helix_authentication_service_secrets_manager_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_policy) | resource |
-| [aws_iam_role.helix_authentication_service_default_role](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_role) | resource |
-| [aws_iam_role.helix_authentication_service_task_execution_role](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_role) | resource |
-| [aws_lb.helix_authentication_service_alb](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/lb) | resource |
-| [aws_lb_listener.helix_authentication_service_alb_https_listener](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/lb_listener) | resource |
-| [aws_lb_target_group.helix_authentication_service_alb_target_group](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/lb_target_group) | resource |
-| [aws_s3_bucket.helix_authentication_service_alb_access_logs_bucket](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket) | resource |
-| [aws_s3_bucket_lifecycle_configuration.access_logs_bucket_lifecycle_configuration](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket_lifecycle_configuration) | resource |
-| [aws_s3_bucket_policy.alb_access_logs_bucket_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket_policy) | resource |
-| [aws_s3_bucket_public_access_block.access_logs_bucket_public_block](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket_public_access_block) | resource |
-| [aws_security_group.helix_authentication_service_alb_sg](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/security_group) | resource |
-| [aws_security_group.helix_authentication_service_sg](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/security_group) | resource |
-| [aws_vpc_security_group_egress_rule.helix_authentication_service_alb_outbound_service](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_egress_rule) | resource |
-| [aws_vpc_security_group_egress_rule.helix_authentication_service_outbound_ipv4](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_egress_rule) | resource |
-| [aws_vpc_security_group_egress_rule.helix_authentication_service_outbound_ipv6](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_egress_rule) | resource |
-| [aws_vpc_security_group_ingress_rule.helix_authentication_service_inbound_alb](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_ingress_rule) | resource |
-| [awscc_secretsmanager_secret.helix_authentication_service_admin_password](https://registry.terraform.io/providers/hashicorp/awscc/1.20.0/docs/resources/secretsmanager_secret) | resource |
-| [awscc_secretsmanager_secret.helix_authentication_service_admin_username](https://registry.terraform.io/providers/hashicorp/awscc/1.20.0/docs/resources/secretsmanager_secret) | resource |
+| [aws_cloudwatch_log_group.helix_authentication_service_log_group](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/cloudwatch_log_group) | resource |
+| [aws_ecs_cluster.helix_authentication_service_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_cluster) | resource |
+| [aws_ecs_cluster_capacity_providers.helix_authentication_service_cluster_fargate_providers](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_cluster_capacity_providers) | resource |
+| [aws_ecs_service.helix_authentication_service](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_service) | resource |
+| [aws_ecs_task_definition.helix_authentication_service_task_definition](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_task_definition) | resource |
+| [aws_iam_policy.helix_authentication_service_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_policy) | resource |
+| [aws_iam_policy.helix_authentication_service_secrets_manager_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_policy) | resource |
+| [aws_iam_role.helix_authentication_service_default_role](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_role) | resource |
+| [aws_iam_role.helix_authentication_service_task_execution_role](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_role) | resource |
+| [aws_lb.helix_authentication_service_alb](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/lb) | resource |
+| [aws_lb_listener.helix_authentication_service_alb_https_listener](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/lb_listener) | resource |
+| [aws_lb_target_group.helix_authentication_service_alb_target_group](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/lb_target_group) | resource |
+| [aws_s3_bucket.helix_authentication_service_alb_access_logs_bucket](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket) | resource |
+| [aws_s3_bucket_lifecycle_configuration.access_logs_bucket_lifecycle_configuration](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket_lifecycle_configuration) | resource |
+| [aws_s3_bucket_policy.alb_access_logs_bucket_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket_policy) | resource |
+| [aws_s3_bucket_public_access_block.access_logs_bucket_public_block](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket_public_access_block) | resource |
+| [aws_security_group.helix_authentication_service_alb_sg](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/security_group) | resource |
+| [aws_security_group.helix_authentication_service_sg](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/security_group) | resource |
+| [aws_vpc_security_group_egress_rule.helix_authentication_service_alb_outbound_service](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_egress_rule) | resource |
+| [aws_vpc_security_group_egress_rule.helix_authentication_service_outbound_ipv4](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_egress_rule) | resource |
+| [aws_vpc_security_group_egress_rule.helix_authentication_service_outbound_ipv6](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_egress_rule) | resource |
+| [aws_vpc_security_group_ingress_rule.helix_authentication_service_inbound_alb](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_ingress_rule) | resource |
+| [awscc_secretsmanager_secret.helix_authentication_service_admin_password](https://registry.terraform.io/providers/hashicorp/awscc/1.22.0/docs/resources/secretsmanager_secret) | resource |
+| [awscc_secretsmanager_secret.helix_authentication_service_admin_username](https://registry.terraform.io/providers/hashicorp/awscc/1.22.0/docs/resources/secretsmanager_secret) | resource |
 | [random_string.helix_authentication_service](https://registry.terraform.io/providers/hashicorp/random/3.6.3/docs/resources/string) | resource |
 | [random_string.helix_authentication_service_alb_access_logs_bucket_suffix](https://registry.terraform.io/providers/hashicorp/random/3.6.3/docs/resources/string) | resource |
-| [aws_ecs_cluster.helix_authentication_service_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/ecs_cluster) | data source |
-| [aws_elb_service_account.main](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/elb_service_account) | data source |
-| [aws_iam_policy_document.access_logs_bucket_alb_write](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_iam_policy_document.ecs_tasks_trust_relationship](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_iam_policy_document.helix_authentication_service_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_iam_policy_document.helix_authentication_service_secrets_manager_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/region) | data source |
+| [aws_ecs_cluster.helix_authentication_service_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/ecs_cluster) | data source |
+| [aws_elb_service_account.main](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/elb_service_account) | data source |
+| [aws_iam_policy_document.access_logs_bucket_alb_write](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.ecs_tasks_trust_relationship](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.helix_authentication_service_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.helix_authentication_service_secrets_manager_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/region) | data source |
 
 ## Inputs
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
-| <a name="input_certificate_arn"></a> [certificate\_arn](#input\_certificate\_arn) | The TLS certificate ARN for the Helix Authentication Service load balancer. | `string` | n/a | yes |
+| <a name="input_certificate_arn"></a> [certificate\_arn](#input\_certificate\_arn) | The TLS certificate ARN for the Helix Authentication Service load balancer. | `string` | `null` | no |
 | <a name="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name) | The name of the cluster to deploy the Helix Authentication Service into. Defaults to null and a cluster will be created. | `string` | `null` | no |
 | <a name="input_container_cpu"></a> [container\_cpu](#input\_container\_cpu) | The CPU allotment for the Helix Authentication Service container. | `number` | `1024` | no |
 | <a name="input_container_memory"></a> [container\_memory](#input\_container\_memory) | The memory allotment for the Helix Authentication Service container. | `number` | `4096` | no |
diff --git a/modules/perforce/helix-authentication-service/variables.tf b/modules/perforce/helix-authentication-service/variables.tf
index bd2fdeed..f2d60fdf 100644
--- a/modules/perforce/helix-authentication-service/variables.tf
+++ b/modules/perforce/helix-authentication-service/variables.tf
@@ -167,6 +167,11 @@ variable "internal" {
 variable "certificate_arn" {
   type        = string
   description = "The TLS certificate ARN for the Helix Authentication Service load balancer."
+  default     = null
+  validation {
+    condition     = var.create_application_load_balancer == (var.certificate_arn != null)
+    error_message = "The certificate_arn variable must be set if and only if the create_application_load_balancer variable is set."
+  }
 }
 
 # - Logging -
diff --git a/modules/perforce/helix-core/README.md b/modules/perforce/helix-core/README.md
index 45de441b..9369be33 100644
--- a/modules/perforce/helix-core/README.md
+++ b/modules/perforce/helix-core/README.md
@@ -83,9 +83,9 @@ No modules.
 | Name | Description |
 |------|-------------|
 | <a name="output_helix_core_eip_id"></a> [helix\_core\_eip\_id](#output\_helix\_core\_eip\_id) | The ID of the Elastic IP associated with your Helix Core instance. |
-| <a name="output_helix_core_eip_private_ip"></a> [helix\_core\_eip\_private\_ip](#output\_helix\_core\_eip\_private\_ip) | The private IP of your Helix Core instance. |
 | <a name="output_helix_core_eip_public_ip"></a> [helix\_core\_eip\_public\_ip](#output\_helix\_core\_eip\_public\_ip) | The public IP of your Helix Core instance. |
 | <a name="output_helix_core_instance_id"></a> [helix\_core\_instance\_id](#output\_helix\_core\_instance\_id) | Instance ID for the Helix Core instance |
+| <a name="output_helix_core_private_ip"></a> [helix\_core\_private\_ip](#output\_helix\_core\_private\_ip) | Private IP for the Helix Core instance |
 | <a name="output_helix_core_super_user_password_secret_arn"></a> [helix\_core\_super\_user\_password\_secret\_arn](#output\_helix\_core\_super\_user\_password\_secret\_arn) | The ARN of the AWS Secrets Manager secret holding your Helix Core super user's password. |
 | <a name="output_helix_core_super_user_username_secret_arn"></a> [helix\_core\_super\_user\_username\_secret\_arn](#output\_helix\_core\_super\_user\_username\_secret\_arn) | The ARN of the AWS Secrets Manager secret holding your Helix Core super user's username. |
 | <a name="output_security_group_id"></a> [security\_group\_id](#output\_security\_group\_id) | The default security group of your Helix Core instance. |
diff --git a/modules/perforce/helix-core/outputs.tf b/modules/perforce/helix-core/outputs.tf
index 3028ae2d..f7311d9a 100644
--- a/modules/perforce/helix-core/outputs.tf
+++ b/modules/perforce/helix-core/outputs.tf
@@ -1,8 +1,3 @@
-output "helix_core_eip_private_ip" {
-  value       = var.internal ? null : aws_eip.helix_core_eip[0].private_ip
-  description = "The private IP of your Helix Core instance."
-}
-
 output "helix_core_eip_public_ip" {
   value       = var.internal ? null : aws_eip.helix_core_eip[0].public_ip
   description = "The public IP of your Helix Core instance."
@@ -36,3 +31,8 @@ output "helix_core_instance_id" {
   value       = aws_instance.helix_core_instance.id
   description = "Instance ID for the Helix Core instance"
 }
+
+output "helix_core_private_ip" {
+  value       = aws_instance.helix_core_instance.private_ip
+  description = "Private IP for the Helix Core instance"
+}
diff --git a/modules/perforce/helix-swarm/README.md b/modules/perforce/helix-swarm/README.md
index fb519611..ae3c1510 100644
--- a/modules/perforce/helix-swarm/README.md
+++ b/modules/perforce/helix-swarm/README.md
@@ -6,7 +6,7 @@
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | 5.76.0 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | 5.78.0 |
 | <a name="requirement_random"></a> [random](#requirement\_random) | 3.6.3 |
 
 ## Providers
@@ -24,48 +24,48 @@ No modules.
 
 | Name | Type |
 |------|------|
-| [aws_cloudwatch_log_group.helix_swarm_redis_service_log_group](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/cloudwatch_log_group) | resource |
-| [aws_cloudwatch_log_group.helix_swarm_service_log_group](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/cloudwatch_log_group) | resource |
-| [aws_ecs_cluster.helix_swarm_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_cluster) | resource |
-| [aws_ecs_cluster_capacity_providers.helix_swarm_cluster_fargate_providers](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_cluster_capacity_providers) | resource |
-| [aws_ecs_service.helix_swarm_service](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_service) | resource |
-| [aws_ecs_task_definition.helix_swarm_task_definition](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/ecs_task_definition) | resource |
-| [aws_elasticache_cluster.swarm](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/elasticache_cluster) | resource |
-| [aws_elasticache_subnet_group.swarm](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/elasticache_subnet_group) | resource |
-| [aws_iam_policy.helix_swarm_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_policy) | resource |
-| [aws_iam_policy.helix_swarm_ssm_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_policy) | resource |
-| [aws_iam_role.helix_swarm_default_role](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_role) | resource |
-| [aws_iam_role.helix_swarm_task_execution_role](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/iam_role) | resource |
-| [aws_lb.helix_swarm_alb](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/lb) | resource |
-| [aws_lb_listener.swarm_alb_https_listener](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/lb_listener) | resource |
-| [aws_lb_target_group.helix_swarm_alb_target_group](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/lb_target_group) | resource |
-| [aws_s3_bucket.helix_swarm_alb_access_logs_bucket](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket) | resource |
-| [aws_s3_bucket_lifecycle_configuration.access_logs_bucket_lifecycle_configuration](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket_lifecycle_configuration) | resource |
-| [aws_s3_bucket_policy.alb_access_logs_bucket_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket_policy) | resource |
-| [aws_s3_bucket_public_access_block.access_logs_bucket_public_block](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/s3_bucket_public_access_block) | resource |
-| [aws_security_group.helix_swarm_alb_sg](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/security_group) | resource |
-| [aws_security_group.helix_swarm_elasticache_sg](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/security_group) | resource |
-| [aws_security_group.helix_swarm_service_sg](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/security_group) | resource |
-| [aws_vpc_security_group_egress_rule.helix_swarm_alb_outbound_service](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_egress_rule) | resource |
-| [aws_vpc_security_group_egress_rule.helix_swarm_service_outbound_ipv4](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_egress_rule) | resource |
-| [aws_vpc_security_group_egress_rule.helix_swarm_service_outbound_ipv6](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_egress_rule) | resource |
-| [aws_vpc_security_group_ingress_rule.helix_swarm_elasticache_ingress](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_ingress_rule) | resource |
-| [aws_vpc_security_group_ingress_rule.helix_swarm_service_inbound_alb](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/resources/vpc_security_group_ingress_rule) | resource |
+| [aws_cloudwatch_log_group.helix_swarm_redis_service_log_group](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/cloudwatch_log_group) | resource |
+| [aws_cloudwatch_log_group.helix_swarm_service_log_group](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/cloudwatch_log_group) | resource |
+| [aws_ecs_cluster.helix_swarm_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_cluster) | resource |
+| [aws_ecs_cluster_capacity_providers.helix_swarm_cluster_fargate_providers](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_cluster_capacity_providers) | resource |
+| [aws_ecs_service.helix_swarm_service](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_service) | resource |
+| [aws_ecs_task_definition.helix_swarm_task_definition](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/ecs_task_definition) | resource |
+| [aws_elasticache_cluster.swarm](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/elasticache_cluster) | resource |
+| [aws_elasticache_subnet_group.swarm](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/elasticache_subnet_group) | resource |
+| [aws_iam_policy.helix_swarm_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_policy) | resource |
+| [aws_iam_policy.helix_swarm_ssm_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_policy) | resource |
+| [aws_iam_role.helix_swarm_default_role](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_role) | resource |
+| [aws_iam_role.helix_swarm_task_execution_role](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_role) | resource |
+| [aws_lb.helix_swarm_alb](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/lb) | resource |
+| [aws_lb_listener.swarm_alb_https_listener](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/lb_listener) | resource |
+| [aws_lb_target_group.helix_swarm_alb_target_group](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/lb_target_group) | resource |
+| [aws_s3_bucket.helix_swarm_alb_access_logs_bucket](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket) | resource |
+| [aws_s3_bucket_lifecycle_configuration.access_logs_bucket_lifecycle_configuration](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket_lifecycle_configuration) | resource |
+| [aws_s3_bucket_policy.alb_access_logs_bucket_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket_policy) | resource |
+| [aws_s3_bucket_public_access_block.access_logs_bucket_public_block](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/s3_bucket_public_access_block) | resource |
+| [aws_security_group.helix_swarm_alb_sg](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/security_group) | resource |
+| [aws_security_group.helix_swarm_elasticache_sg](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/security_group) | resource |
+| [aws_security_group.helix_swarm_service_sg](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/security_group) | resource |
+| [aws_vpc_security_group_egress_rule.helix_swarm_alb_outbound_service](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_egress_rule) | resource |
+| [aws_vpc_security_group_egress_rule.helix_swarm_service_outbound_ipv4](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_egress_rule) | resource |
+| [aws_vpc_security_group_egress_rule.helix_swarm_service_outbound_ipv6](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_egress_rule) | resource |
+| [aws_vpc_security_group_ingress_rule.helix_swarm_elasticache_ingress](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_ingress_rule) | resource |
+| [aws_vpc_security_group_ingress_rule.helix_swarm_service_inbound_alb](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/vpc_security_group_ingress_rule) | resource |
 | [random_string.helix_swarm](https://registry.terraform.io/providers/hashicorp/random/3.6.3/docs/resources/string) | resource |
 | [random_string.helix_swarm_alb_access_logs_bucket_suffix](https://registry.terraform.io/providers/hashicorp/random/3.6.3/docs/resources/string) | resource |
-| [aws_ecs_cluster.helix_swarm_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/ecs_cluster) | data source |
-| [aws_elb_service_account.main](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/elb_service_account) | data source |
-| [aws_iam_policy_document.access_logs_bucket_alb_write](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_iam_policy_document.ecs_tasks_trust_relationship](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_iam_policy_document.helix_swarm_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_iam_policy_document.helix_swarm_ssm_policy](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/iam_policy_document) | data source |
-| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/5.76.0/docs/data-sources/region) | data source |
+| [aws_ecs_cluster.helix_swarm_cluster](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/ecs_cluster) | data source |
+| [aws_elb_service_account.main](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/elb_service_account) | data source |
+| [aws_iam_policy_document.access_logs_bucket_alb_write](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.ecs_tasks_trust_relationship](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.helix_swarm_default_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.helix_swarm_ssm_policy](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/iam_policy_document) | data source |
+| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/data-sources/region) | data source |
 
 ## Inputs
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
-| <a name="input_certificate_arn"></a> [certificate\_arn](#input\_certificate\_arn) | The TLS certificate ARN for the Helix Swarm service load balancer. | `string` | n/a | yes |
+| <a name="input_certificate_arn"></a> [certificate\_arn](#input\_certificate\_arn) | The TLS certificate ARN for the Helix Swarm service load balancer. | `string` | `null` | no |
 | <a name="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name) | The name of the cluster to deploy the Helix Swarm service into. Defaults to null and a cluster will be created. | `string` | `null` | no |
 | <a name="input_create_application_load_balancer"></a> [create\_application\_load\_balancer](#input\_create\_application\_load\_balancer) | This flag controls the creation of an application load balancer as part of the module. | `bool` | `true` | no |
 | <a name="input_create_helix_swarm_default_policy"></a> [create\_helix\_swarm\_default\_policy](#input\_create\_helix\_swarm\_default\_policy) | Optional creation of Helix Swarm default IAM Policy. Default is set to true. | `bool` | `true` | no |
diff --git a/modules/perforce/helix-swarm/variables.tf b/modules/perforce/helix-swarm/variables.tf
index e19c09e0..130d8a60 100644
--- a/modules/perforce/helix-swarm/variables.tf
+++ b/modules/perforce/helix-swarm/variables.tf
@@ -166,6 +166,11 @@ variable "internal" {
 variable "certificate_arn" {
   type        = string
   description = "The TLS certificate ARN for the Helix Swarm service load balancer."
+  default     = null
+  validation {
+    condition     = var.create_application_load_balancer == (var.certificate_arn != null)
+    error_message = "The certificate_arn variable must be set if and only if the create_application_load_balancer variable is set."
+  }
 }
 
 # - Logging -