Disable DHE Cipher for ALB

Hello Team, We recently came across the case where we want our SSL and TSL to allow selected ciphers only and Disable some of DHE cipher ( TLS_DHE_RSA_WITH_AES_128_CBC_SHA and TLS_DHE_RSA_WITH_AES_256_CBC_SHA ). in order to stop some vulnerability CVE-2002-20001, CVE-2022-40735

Please help use to how to do this, as per my understanding with ALB we dnt have option to setup custom Security policy

Thanks in advance