How do I apply client IP address preservation to AWS resources?

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

// Create a VPC
const main = new aws.ec2.Vpc("main", {
    cidrBlock: "10.0.0.0/16",
    enableDnsSupport: true,
    enableDnsHostnames: true,
});
// Create a Public Subnet
const _public = new aws.ec2.Subnet("public", {
    vpcId: main.id,
    cidrBlock: "10.0.1.0/24",
    availabilityZone: "us-west-2a",
    mapPublicIpOnLaunch: true,
});
// Create an Internet Gateway
const gateway = new aws.ec2.InternetGateway("gateway", {vpcId: main.id});
// Create a Route Table
const publicRouteTable = new aws.ec2.RouteTable("public", {vpcId: main.id});
// Create a Route
const publicRoute = new aws.ec2.Route("public", {
    routeTableId: publicRouteTable.id,
    destinationCidrBlock: "0.0.0.0/0",
    gatewayId: gateway.id,
});
// Associate the Route Table with the Subnet
const publicRouteTableAssociation = new aws.ec2.RouteTableAssociation("public", {
    subnetId: _public.id,
    routeTableId: publicRouteTable.id,
});
// Create Security Group
const allowTraffic = new aws.ec2.SecurityGroup("allow_traffic", {
    vpcId: main.id,
    ingress: [{
        fromPort: 80,
        toPort: 80,
        protocol: "tcp",
        cidrBlocks: ["0.0.0.0/0"],
    }],
    egress: [{
        fromPort: 0,
        toPort: 0,
        protocol: "-1",
        cidrBlocks: ["0.0.0.0/0"],
    }],
});
// Create an EC2 instance
const app = new aws.ec2.Instance("app", {
    ami: "ami-0c55b159cbfafe1f0",
    instanceType: aws.ec2.InstanceType.T2_Micro,
    subnetId: _public.id,
    vpcSecurityGroupIds: [allowTraffic.id],
    userData: `#!/bin/bash
echo "Hello, World" > index.html
nohup busybox httpd -f -p 80 &
`,
});
// Create a Target Group
const appTargetGroup = new aws.lb.TargetGroup("app", {
    name: "app-tg",
    port: 80,
    protocol: "HTTP",
    vpcId: main.id,
    healthCheck: {
        path: "/",
        interval: 30,
        timeout: 5,
        healthyThreshold: 2,
        unhealthyThreshold: 10,
    },
});
// Create a Load Balancer
const appLoadBalancer = new aws.lb.LoadBalancer("app", {
    name: "app-lb",
    internal: false,
    loadBalancerType: "application",
    securityGroups: [allowTraffic.id],
    subnets: [_public.id],
});
// Create a Listener
const appListener = new aws.lb.Listener("app", {
    loadBalancerArn: appLoadBalancer.arn,
    port: 80,
    protocol: "HTTP",
    defaultActions: [{
        type: "forward",
        targetGroupArn: appTargetGroup.arn,
    }],
});
// Associate the EC2 instances with the Target Group
const appTargetGroupAttachment = new aws.lb.TargetGroupAttachment("app", {
    targetGroupArn: appTargetGroup.arn,
    targetId: app.id,
    port: 80,
});