diff --git a/apps/prod/tekton/configs/tasks/aws-cli.yaml b/apps/prod/tekton/configs/tasks/aws-cli.yaml
index 1cc652b54..37b2f113c 100644
--- a/apps/prod/tekton/configs/tasks/aws-cli.yaml
+++ b/apps/prod/tekton/configs/tasks/aws-cli.yaml
@@ -31,7 +31,7 @@ spec:
       default: ["help"]
   steps:
     - name: awscli
-      image: docker.io/amazon/aws-cli:2.17.8
+      image: docker.io/amazon/aws-cli:2.17.23
       script: "$(params.SCRIPT)"
       args:
         - "$(params.ARGS)"
diff --git a/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml b/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml
index cd46c994b..210df2837 100644
--- a/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml
+++ b/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml
@@ -80,7 +80,7 @@ spec:
         echo "✅ Uploaded for ${tag} ."
 
     - name: upload-dm-tarballs-to-s3
-      image: docker.io/amazon/aws-cli:2.17.8
+      image: docker.io/amazon/aws-cli:2.17.23
       workingDir: /workspace
       script: |
         #!/usr/bin/env bash