HTTPProxy for hostnames, routes, and origins, a TrafficProtectionPolicy for the web application firewall, and an optional SecurityPolicy for authentication. For how they fit together, see What an ALB is made of.
In the Cloud Portal, a load balancer’s Configuration tab gathers its settings in one place: general details, custom hostnames, the backend pool, TLS and certificates, security and the web application firewall, and access control.

A load balancer's settings in the Cloud Portal