diff --git a/examples/aws/terraform/auth-user-data.tpl b/examples/aws/terraform/auth-user-data.tpl
index bf49bb6c5e83..deec543530e1 100644
--- a/examples/aws/terraform/auth-user-data.tpl
+++ b/examples/aws/terraform/auth-user-data.tpl
@@ -206,7 +206,7 @@ systemctl start teleport-ssm-publish-tokens.timer
 # Install certbot to rotate certificates
 # Certbot is a tool to request letsencrypt certificates,
 # remove it if you don't need letsencrypt.
-pip install certbot==0.21.0 certbot-dns-route53==0.21.0
+pip install certbot==0.28.0 certbot-dns-route53==0.28.0 requests==2.20
 
 # This script uses DNS-01 challenge, which means that you
 # have to control route53 zone as it modifes zone records