diff --git a/terraform/aws/analytical-platform-development/cluster/iam-roles.tf b/terraform/aws/analytical-platform-development/cluster/iam-roles.tf
index 5825c1bf2b..ef6eff8964 100644
--- a/terraform/aws/analytical-platform-development/cluster/iam-roles.tf
+++ b/terraform/aws/analytical-platform-development/cluster/iam-roles.tf
@@ -101,7 +101,7 @@ module "iam_assumable_role_cert_manager" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name_prefix              = "cert_manager"
   provider_url                  = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
@@ -117,7 +117,7 @@ module "iam_assumable_role_cluster_autoscaler" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name_prefix              = substr("cluster-autoscaler-${module.eks.cluster_id}", 0, 31)
   provider_url                  = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
@@ -148,7 +148,7 @@ module "iam_assumable_role_external_dns" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name_prefix              = "external_dns"
   provider_url                  = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
@@ -164,7 +164,7 @@ module "iam_assumable_role_external_secrets" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name_prefix              = "external_secrets"
   provider_url                  = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
@@ -180,7 +180,7 @@ module "iam_assumable_role_jupyterhub_teama" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name                     = "jupyterhub-teama"
   provider_url                  = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
@@ -196,7 +196,7 @@ module "iam_assumable_role_prometheus_remote_ingest" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name                     = "prometheus_remote_ingest"
   provider_url                  = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
@@ -212,7 +212,7 @@ module "iam_assumable_role_superset" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.52.1"
+  version                       = "5.52.2"
   create_role                   = true
   role_name_prefix              = "superset"
   provider_url                  = "oidc.eks.eu-west-1.amazonaws.com/id/DDE7A0AC243F2E06BD539D26B3EC28A6"
@@ -228,7 +228,7 @@ module "iam_assumable_role_control_panel_api" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source           = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version          = "5.52.1"
+  version          = "5.52.2"
   create_role      = true
   role_name_prefix = "dev_control_panel_api"
   provider_url     = module.eks.cluster_oidc_issuer_url
diff --git a/terraform/aws/analytical-platform-development/cluster/karpenter.tf b/terraform/aws/analytical-platform-development/cluster/karpenter.tf
index 52b47e7cb7..277a1a458d 100644
--- a/terraform/aws/analytical-platform-development/cluster/karpenter.tf
+++ b/terraform/aws/analytical-platform-development/cluster/karpenter.tf
@@ -128,7 +128,7 @@ module "iam_karpenter_controller_irsa" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
 
   source                         = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                        = "5.52.1"
+  version                        = "5.52.2"
   create_role                    = true
   role_name_prefix               = "karpenter_controller"
   provider_url                   = module.eks.cluster_oidc_issuer_url