Thanks for your quick response, Mike.
Yes, I can see certbot is listening on port 80.
[root@ip-172-31-15-25 ~]# ss -pant | grep -i listen | grep ':80'
LISTEN 0 5 *:80 *:* users:(("certbot",pid=227819,fd=8))