diff --git a/README.md b/README.md
index 89ff8e2..ca36696 100644
--- a/README.md
+++ b/README.md
@@ -226,7 +226,7 @@ Available targets:
|------|--------|---------|
| [dns\_firewall\_label](#module\_dns\_firewall\_label) | cloudposse/label/null | 0.25.0 |
| [firehose\_label](#module\_firehose\_label) | cloudposse/label/null | 0.25.0 |
-| [firehose\_s3\_bucket](#module\_firehose\_s3\_bucket) | cloudposse/s3-bucket/aws | 3.1.3 |
+| [firehose\_s3\_bucket](#module\_firehose\_s3\_bucket) | cloudposse/s3-bucket/aws | 4.0.1 |
| [network\_firewall\_label](#module\_network\_firewall\_label) | cloudposse/label/null | 0.25.0 |
| [security\_groups\_common\_label](#module\_security\_groups\_common\_label) | cloudposse/label/null | 0.25.0 |
| [security\_groups\_content\_audit\_label](#module\_security\_groups\_content\_audit\_label) | cloudposse/label/null | 0.25.0 |
diff --git a/docs/terraform.md b/docs/terraform.md
index 091f572..76d740e 100644
--- a/docs/terraform.md
+++ b/docs/terraform.md
@@ -19,7 +19,7 @@
|------|--------|---------|
| [dns\_firewall\_label](#module\_dns\_firewall\_label) | cloudposse/label/null | 0.25.0 |
| [firehose\_label](#module\_firehose\_label) | cloudposse/label/null | 0.25.0 |
-| [firehose\_s3\_bucket](#module\_firehose\_s3\_bucket) | cloudposse/s3-bucket/aws | 3.1.3 |
+| [firehose\_s3\_bucket](#module\_firehose\_s3\_bucket) | cloudposse/s3-bucket/aws | 4.0.1 |
| [network\_firewall\_label](#module\_network\_firewall\_label) | cloudposse/label/null | 0.25.0 |
| [security\_groups\_common\_label](#module\_security\_groups\_common\_label) | cloudposse/label/null | 0.25.0 |
| [security\_groups\_content\_audit\_label](#module\_security\_groups\_content\_audit\_label) | cloudposse/label/null | 0.25.0 |
diff --git a/firehose.tf b/firehose.tf
index 3a78e43..7183eb8 100644
--- a/firehose.tf
+++ b/firehose.tf
@@ -10,7 +10,7 @@ module "firehose_label" {
module "firehose_s3_bucket" {
count = local.enabled && var.firehose_enabled ? 1 : 0
source = "cloudposse/s3-bucket/aws"
- version = "3.1.3"
+ version = "4.0.1"
acl = "private"
enabled = true
user_enabled = true