diff --git a/infrastructure/terragrunt/aws/database/rds.tf b/infrastructure/terragrunt/aws/database/rds.tf
index 149e37088..4b838babd 100644
--- a/infrastructure/terragrunt/aws/database/rds.tf
+++ b/infrastructure/terragrunt/aws/database/rds.tf
@@ -2,7 +2,7 @@
 # RDS MySQL cluster across 3 subnets
 #
 module "rds_cluster" {
-  source = "github.com/cds-snc/terraform-modules//rds?ref=v9.4.5"
+  source = "github.com/cds-snc/terraform-modules//rds?ref=v9.4.8"
   name   = "wordpress"
 
   database_name  = var.database_name
diff --git a/infrastructure/terragrunt/aws/ecr/oidc.tf b/infrastructure/terragrunt/aws/ecr/oidc.tf
index e7dcba8e9..e660dcbca 100644
--- a/infrastructure/terragrunt/aws/ecr/oidc.tf
+++ b/infrastructure/terragrunt/aws/ecr/oidc.tf
@@ -3,7 +3,7 @@ locals {
 }
 
 module "ecr_tag_release" {
-  source            = "github.com/cds-snc/terraform-modules//gh_oidc_role?ref=v9.4.5"
+  source            = "github.com/cds-snc/terraform-modules//gh_oidc_role?ref=v9.4.8"
   billing_tag_value = var.billing_tag_value
   roles = [
     {
diff --git a/infrastructure/terragrunt/aws/ecs/cloudwatch_logs.tf b/infrastructure/terragrunt/aws/ecs/cloudwatch_logs.tf
index 36af9310b..9ec60522e 100644
--- a/infrastructure/terragrunt/aws/ecs/cloudwatch_logs.tf
+++ b/infrastructure/terragrunt/aws/ecs/cloudwatch_logs.tf
@@ -9,7 +9,7 @@ resource "aws_cloudwatch_log_group" "ecs_events" {
 }
 
 module "sentinel_forwarder" {
-  source            = "github.com/cds-snc/terraform-modules//sentinel_forwarder?ref=v9.4.5"
+  source            = "github.com/cds-snc/terraform-modules//sentinel_forwarder?ref=v9.4.8"
   function_name     = "sentinel-forwarder"
   billing_tag_value = var.billing_tag_value
 
diff --git a/infrastructure/terragrunt/aws/network/vpc.tf b/infrastructure/terragrunt/aws/network/vpc.tf
index 94fd7eaf2..39e12bcc5 100644
--- a/infrastructure/terragrunt/aws/network/vpc.tf
+++ b/infrastructure/terragrunt/aws/network/vpc.tf
@@ -2,7 +2,7 @@
 # VPC: 3 public + 3 private subnets across 3 availability zones
 #
 module "wordpress_vpc" {
-  source = "github.com/cds-snc/terraform-modules//vpc?ref=v9.4.5"
+  source = "github.com/cds-snc/terraform-modules//vpc?ref=v9.4.8"
   name   = "wordpress"
 
   cidrsubnet_newbits = 8
diff --git a/infrastructure/terragrunt/aws/network/vpn.tf b/infrastructure/terragrunt/aws/network/vpn.tf
index 9979639e9..a755b0c54 100644
--- a/infrastructure/terragrunt/aws/network/vpn.tf
+++ b/infrastructure/terragrunt/aws/network/vpn.tf
@@ -1,5 +1,5 @@
 module "vpn" {
-  source = "github.com/cds-snc/terraform-modules//client_vpn?ref=v9.4.5"
+  source = "github.com/cds-snc/terraform-modules//client_vpn?ref=v9.4.8"
 
   endpoint_name       = "private_subnets"
   access_group_id     = var.client_vpn_access_group_id
diff --git a/infrastructure/terragrunt/aws/storage/s3.tf b/infrastructure/terragrunt/aws/storage/s3.tf
index 4fd1944f5..eda6db7cb 100644
--- a/infrastructure/terragrunt/aws/storage/s3.tf
+++ b/infrastructure/terragrunt/aws/storage/s3.tf
@@ -1,5 +1,5 @@
 module "wordpress_storage" {
-  source            = "github.com/cds-snc/terraform-modules//S3?ref=v9.4.5"
+  source            = "github.com/cds-snc/terraform-modules//S3?ref=v9.4.8"
   bucket_name       = "platform-gc-articles-${var.env}-uploads"
   billing_tag_value = var.billing_tag_value
 }