diff --git a/main.tf b/main.tf
index 8f60f715..2237abce 100644
--- a/main.tf
+++ b/main.tf
@@ -111,7 +111,7 @@ data "google_storage_project_service_account" "gcs_account" {
 module "kms" {
   count   = var.encrypt_gcs_bucket_tfstate ? 1 : 0
   source  = "terraform-google-modules/kms/google"
-  version = "~> 2.1"
+  version = "~> 3.0"
 
   project_id           = module.seed_project.project_id
   location             = var.default_region