diff --git a/CHANGELOG.md b/CHANGELOG.md
index 597d07a..31bffe6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## 14.0.1
+
+* bugfix: Pin vpc_cni_irsa module to 5.33 to avoid breaking aws provider change
+
 ## 14.0.0
 * Add precommit ci
 * Apply fixes from pre-commit
@@ -13,6 +17,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * Fix fix for fixes from pre-commit
 * Upgrade to EKS 1.27
 
+## 13.3.4
+
+* bugfix: Pin vpc_cni_irsa module to 5.33 to avoid breaking aws provider change
+
 ## 13.3.1
 
 * Attach waf to shared alb
diff --git a/README.md b/README.md
index 976786f..a9a07dd 100644
--- a/README.md
+++ b/README.md
@@ -47,7 +47,7 @@ Note that this example may create resources which cost money. Run `terraform des
 |------|--------|---------|
 | <a name="module_eks"></a> [eks](#module\_eks) | terraform-aws-modules/eks/aws | 19.0.4 |
 | <a name="module_eks_managed_node_groups"></a> [eks\_managed\_node\_groups](#module\_eks\_managed\_node\_groups) | terraform-aws-modules/eks/aws//modules/eks-managed-node-group | 19.21.0 |
-| <a name="module_vpc_cni_irsa"></a> [vpc\_cni\_irsa](#module\_vpc\_cni\_irsa) | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | ~> 5.33 |
+| <a name="module_vpc_cni_irsa"></a> [vpc\_cni\_irsa](#module\_vpc\_cni\_irsa) | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | 5.33 |
 
 ## Resources
 
diff --git a/main.tf b/main.tf
index 195fc2b..31b5ae2 100644
--- a/main.tf
+++ b/main.tf
@@ -316,7 +316,7 @@ module "eks_managed_node_groups" {
 
 module "vpc_cni_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "~> 5.33"
+  version = "5.33"
 
   role_name                     = "${var.cluster_name}-vpc_cni"
   attach_vpc_cni_policy         = true