Essentially you cannot add Amazon issued certificates to Tomcat: you cannot retrieve the private key of the certificate.

However, you can deploy the certificate on ELB (elastic load balancer). You have to ensure that ELB is listening on port 443.

You will find step by step instructions on AWS documentation (http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-create-https-ssl-load-balancer.html#create-https-lb-clt).