diff --git a/modules/eks-cluster/cluster.tf b/modules/eks-cluster/cluster.tf
index 1a7ee6c7..7855f49c 100644
--- a/modules/eks-cluster/cluster.tf
+++ b/modules/eks-cluster/cluster.tf
@@ -33,7 +33,7 @@ provider "kubernetes" {
 # https://github.com/terraform-aws-modules/terraform-aws-eks
 module "eks" {
   source  = "terraform-aws-modules/eks/aws"
-  version = "19.21.0"
+  version = "20.11.1"
 
   cluster_name                    = var.name
   cluster_version                 = var.kubernetes_version
diff --git a/modules/eks-cluster/iam.tf b/modules/eks-cluster/iam.tf
index eab12690..b04b1efb 100644
--- a/modules/eks-cluster/iam.tf
+++ b/modules/eks-cluster/iam.tf
@@ -5,7 +5,7 @@
 
 module "ebs_cs_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.1"
 
   role_name = "${var.name}-ebs-cs-role"
 
@@ -25,7 +25,7 @@ module "ebs_cs_role" {
 # Following role allows cert-manager to do the DNS01 challenge
 module "cert_manager_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.1"
 
   role_name = "${var.name}-cert-manager-role"
 
@@ -44,7 +44,7 @@ module "cert_manager_role" {
 # Following role allows external-dns to adjust values in hosted zones
 module "external_dns_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.1"
 
   role_name = "${var.name}-external-dns-role"
 
diff --git a/modules/eks-cluster/vpc.tf b/modules/eks-cluster/vpc.tf
index f937c178..221ca300 100644
--- a/modules/eks-cluster/vpc.tf
+++ b/modules/eks-cluster/vpc.tf
@@ -4,7 +4,7 @@ locals {
 
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.5.2"
+  version = "5.8.1"
 
   name = local.vpc_name
   # requires a /16 range, resulting in 2 leftover subnets, which can be used for DBs