diff --git a/pkg/cloudprovider/providers/aws/aws_loadbalancer.go b/pkg/cloudprovider/providers/aws/aws_loadbalancer.go
index 339160f1e3..5bdbddb6f6 100644
--- a/pkg/cloudprovider/providers/aws/aws_loadbalancer.go
+++ b/pkg/cloudprovider/providers/aws/aws_loadbalancer.go
@@ -1112,10 +1112,10 @@ func (c *Cloud) ensureLoadBalancer(namespacedName types.NamespacedName, loadBala
 
 				found := -1
 				for i, expected := range listeners {
-					if elbProtocolsAreEqual(actual.Protocol, expected.Protocol) {
+					if !elbProtocolsAreEqual(actual.Protocol, expected.Protocol) {
 						continue
 					}
-					if elbProtocolsAreEqual(actual.InstanceProtocol, expected.InstanceProtocol) {
+					if !elbProtocolsAreEqual(actual.InstanceProtocol, expected.InstanceProtocol) {
 						continue
 					}
 					if aws.Int64Value(actual.InstancePort) != aws.Int64Value(expected.InstancePort) {
@@ -1124,7 +1124,7 @@ func (c *Cloud) ensureLoadBalancer(namespacedName types.NamespacedName, loadBala
 					if aws.Int64Value(actual.LoadBalancerPort) != aws.Int64Value(expected.LoadBalancerPort) {
 						continue
 					}
-					if awsArnEquals(actual.SSLCertificateId, expected.SSLCertificateId) {
+					if !awsArnEquals(actual.SSLCertificateId, expected.SSLCertificateId) {
 						continue
 					}
 					found = i