diff --git a/concourse-tools/Dockerfile b/concourse-tools/Dockerfile
index f0fdfd2a..4acc8fe3 100644
--- a/concourse-tools/Dockerfile
+++ b/concourse-tools/Dockerfile
@@ -2,8 +2,8 @@ FROM ghcr.io/alphagov/paas/bosh-cli-v2:main
 
 ENV AWSCLI_VERSION "1.19.112"
 ENV PATH $PATH:/usr/local/bin
-ENV TERRAFORM_VER 1.5.2
-ENV TERRAFORM_SUM 781ffe0c8888d35b3f5bd0481e951cebe9964b9cfcb27e352f22687975401bcd
+ENV TERRAFORM_VER 1.9.2
+ENV TERRAFORM_SUM d5f5aaba0f8ebff88ef0b23935872e154e2abf3172596261be834605ba3ba714
 ENV TERRAFORM_ZIP terraform_${TERRAFORM_VER}_linux_amd64.zip
 
 RUN apt-get update && apt-get install -y \
diff --git a/concourse-tools/plugin_cache.tf b/concourse-tools/plugin_cache.tf
index 3c4c5bbe..0b14000e 100644
--- a/concourse-tools/plugin_cache.tf
+++ b/concourse-tools/plugin_cache.tf
@@ -2,17 +2,17 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.9.0"
+      version = "5.59.0"
     }
     null = {
       source  = "hashicorp/null"
-      version = "3.1.1"
+      version = "3.2.2"
     }
     random = {
       source  = "hashicorp/random"
-      version = "3.5.1"
+      version = "3.6.2"
     }
   }
-  required_version = "1.5.2"
+  required_version = "1.9.2"
 }
 
diff --git a/concourse-tools/terraform_spec.rb b/concourse-tools/terraform_spec.rb
index ff605757..03bd4d6a 100644
--- a/concourse-tools/terraform_spec.rb
+++ b/concourse-tools/terraform_spec.rb
@@ -26,7 +26,7 @@
   it "has the expected Terraform version" do
     expect(
       command("terraform version").stdout
-    ).to match("Terraform v1.5.2")
+    ).to match("Terraform v1.9.2")
   end
 
   it "installs SSH" do
diff --git a/terraform/plugin_cache.tf b/terraform/plugin_cache.tf
index 3c4c5bbe..0b14000e 100644
--- a/terraform/plugin_cache.tf
+++ b/terraform/plugin_cache.tf
@@ -2,17 +2,17 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.9.0"
+      version = "5.59.0"
     }
     null = {
       source  = "hashicorp/null"
-      version = "3.1.1"
+      version = "3.2.2"
     }
     random = {
       source  = "hashicorp/random"
-      version = "3.5.1"
+      version = "3.6.2"
     }
   }
-  required_version = "1.5.2"
+  required_version = "1.9.2"
 }