diff --git a/terraform/environments/analytical-platform-ingestion/vpc-endpoints.tf b/terraform/environments/analytical-platform-ingestion/vpc-endpoints.tf
index 853985beea4..0859ff0eaeb 100644
--- a/terraform/environments/analytical-platform-ingestion/vpc-endpoints.tf
+++ b/terraform/environments/analytical-platform-ingestion/vpc-endpoints.tf
@@ -2,7 +2,7 @@ module "connected_vpc_endpoints" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
-  version = "5.13.0"
+  version = "5.16.0"
 
   vpc_id     = module.connected_vpc.vpc_id
   subnet_ids = module.connected_vpc.private_subnets
@@ -59,7 +59,7 @@ module "isolated_vpc_endpoints" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
-  version = "5.13.0"
+  version = "5.16.0"
 
   vpc_id             = module.isolated_vpc.vpc_id
   subnet_ids         = module.isolated_vpc.private_subnets
diff --git a/terraform/environments/analytical-platform-ingestion/vpc.tf b/terraform/environments/analytical-platform-ingestion/vpc.tf
index 4c9cfd2a676..81b46e525ac 100644
--- a/terraform/environments/analytical-platform-ingestion/vpc.tf
+++ b/terraform/environments/analytical-platform-ingestion/vpc.tf
@@ -2,7 +2,7 @@ module "connected_vpc" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.13.0"
+  version = "5.16.0"
 
   name            = "${local.application_name}-${local.environment}-connected"
   azs             = slice(data.aws_availability_zones.available.names, 0, 3)
@@ -26,7 +26,7 @@ module "isolated_vpc" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.13.0"
+  version = "5.16.0"
 
   name            = "${local.application_name}-${local.environment}-isolated"
   azs             = slice(data.aws_availability_zones.available.names, 0, 3)