diff --git a/Dockerfile b/Dockerfile
index 32c7c0e62784574d215b3f73ee678517dd66db15..bada2eaf27f8447c0b493383be2d705eb44e5d63 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@ ARG BASE_TAG=9.5
 
 FROM quay.io/argoproj/argocd:v2.14.8 as argocd
 
-FROM amazon/aws-cli:2.25.7 as awscli
+FROM amazon/aws-cli:2.25.8 as awscli
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/Dockerfile.arm64 b/Dockerfile.arm64
index d3ed7b92aa9fa86e2672b9b11608bbb90ad14efc..4d8ce817a141e024008cd4e0096484fb5d5a9436 100644
--- a/Dockerfile.arm64
+++ b/Dockerfile.arm64
@@ -4,7 +4,7 @@ ARG BASE_TAG=9.5
 
 FROM quay.io/argoproj/argocd:v2.14.8.arm64 as argocd
 
-FROM amazon/aws-cli:2.25.7.arm64 as awscli
+FROM amazon/aws-cli:2.25.8.arm64 as awscli
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index b6227c327f0db5f7564bf0b16b4855cbedbbb2d5..a3c246a64a362c774c94cc8a5a42ffcb792893eb 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -30,10 +30,10 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- tag: "amazon/aws-cli:2.25.7"
-  url: "docker://docker.io/amazon/aws-cli@sha256:6b4a15c659a1c8303619c96061d2fffbbb8722ab2cfc021f6c63c7ba655b489b"
-- tag: "amazon/aws-cli:2.25.7.arm64"
-  url: "docker://docker.io/amazon/aws-cli@sha256:1c6eb34e045942776fc7d744b5c5ecbdee4867b17608260ba30e3e109798752b"
+- tag: "amazon/aws-cli:2.25.8"
+  url: "docker://docker.io/amazon/aws-cli@sha256:f0de2802912a26ff0d1e254fb91da36726785b84b5a0ba4e12948da743034af9"
+- tag: "amazon/aws-cli:2.25.8.arm64"
+  url: "docker://docker.io/amazon/aws-cli@sha256:bd3724a93ad02d8d25fc33a7c7d168aacf123c70db7f166e51462299baa3e74f"
 
 - tag: "quay.io/argoproj/argocd:v2.14.8"
   url: "docker://quay.io/argoproj/argocd@sha256:dbb08455f575feaf379b55170a3c39e554f11e393014a241acf2d0b89eaccc61"