diff --git a/src/README.md b/src/README.md
index 24d1550..55d0ab7 100644
--- a/src/README.md
+++ b/src/README.md
@@ -68,7 +68,7 @@ components:
 
 | Name | Source | Version |
 |------|--------|---------|
-| <a name="module_acm"></a> [acm](#module\_acm) | cloudposse/acm-request-certificate/aws | 0.16.0 |
+| <a name="module_acm"></a> [acm](#module\_acm) | cloudposse/acm-request-certificate/aws | 0.16.3 |
 | <a name="module_dns_delegated"></a> [dns\_delegated](#module\_dns\_delegated) | cloudposse/stack-config/yaml//modules/remote-state | 1.5.0 |
 | <a name="module_iam_roles"></a> [iam\_roles](#module\_iam\_roles) | ../account-map/modules/iam-roles | n/a |
 | <a name="module_private_ca"></a> [private\_ca](#module\_private\_ca) | cloudposse/stack-config/yaml//modules/remote-state | 1.5.0 |
diff --git a/src/main.tf b/src/main.tf
index a2234c4..1b1d1e6 100644
--- a/src/main.tf
+++ b/src/main.tf
@@ -22,7 +22,7 @@ data "aws_route53_zone" "default" {
 # https://github.com/cloudposse/terraform-aws-acm-request-certificate
 module "acm" {
   source  = "cloudposse/acm-request-certificate/aws"
-  version = "0.16.0"
+  version = "0.16.3"
 
   certificate_authority_arn         = local.private_ca_enabled ? module.private_ca[0].outputs.private_ca[var.certificate_authority_component_key].certificate_authority.arn : null
   validation_method                 = local.private_ca_enabled ? null : var.validation_method