can we restrict access to ALB by IP address?

what happens when a target fails health check up?

what is the default connection timeout for an ALB?

what does target group do in ALB?

what does security group do in ALB?