Import the new SSL into ACM
Update the Load Balancer in EC2 to use the new certificate to configure SSL for the API
Update the Cloudfront entry to use the new certificate to configure SSL for the frontend website.