diff --git a/backend/multi-account/backups/requirements-dev.txt b/backend/multi-account/backups/requirements-dev.txt
index 08fc787c5..44fc65016 100644
--- a/backend/multi-account/backups/requirements-dev.txt
+++ b/backend/multi-account/backups/requirements-dev.txt
@@ -23,18 +23,14 @@ idna==3.11
     # via requests
 iniconfig==2.3.0
     # via pytest
-jinja2==3.1.6
-    # via moto
 jmespath==1.1.0
     # via
     #   boto3
     #   botocore
 markupsafe==3.0.3
-    # via
-    #   jinja2
-    #   werkzeug
-moto==5.1.22
-    # via -r backups/requirements-dev.in
+    # via werkzeug
+moto==5.2.1
+    # via -r requirements-dev.in
 packaging==26.1
     # via pytest
 pluggy==1.6.0
@@ -44,11 +40,9 @@ pycparser==3.0
 pygments==2.20.0
     # via pytest
 pytest==9.0.3
-    # via -r backups/requirements-dev.in
+    # via -r requirements-dev.in
 python-dateutil==2.9.0.post0
-    # via
-    #   botocore
-    #   moto
+    # via botocore
 pyyaml==6.0.3
     # via responses
 requests==2.33.1
diff --git a/backend/multi-account/backups/requirements.in b/backend/multi-account/backups/requirements.in
index 3e1ae5c7d..eb38dfd2c 100644
--- a/backend/multi-account/backups/requirements.in
+++ b/backend/multi-account/backups/requirements.in
@@ -1,2 +1,2 @@
-aws-cdk-lib>=2.251.0
+aws-cdk-lib>=2.253.1
 constructs>=10.6.0,<11.0.0
diff --git a/backend/multi-account/backups/requirements.txt b/backend/multi-account/backups/requirements.txt
index 503dc4193..aedefe90c 100644
--- a/backend/multi-account/backups/requirements.txt
+++ b/backend/multi-account/backups/requirements.txt
@@ -14,7 +14,7 @@ aws-cdk-asset-node-proxy-agent-v6==2.1.1
     # via aws-cdk-lib
 aws-cdk-cloud-assembly-schema==53.20.0
     # via aws-cdk-lib
-aws-cdk-lib==2.251.0
+aws-cdk-lib==2.253.1
     # via -r requirements.in
 cattrs==25.3.0
     # via jsii
diff --git a/backend/multi-account/control-tower/requirements-dev.txt b/backend/multi-account/control-tower/requirements-dev.txt
index 32843ff99..a32b0f268 100644
--- a/backend/multi-account/control-tower/requirements-dev.txt
+++ b/backend/multi-account/control-tower/requirements-dev.txt
@@ -18,7 +18,7 @@ charset-normalizer==3.4.7
     # via requests
 click==8.3.2
     # via pip-tools
-coverage[toml]==7.13.5
+coverage[toml]==7.14.0
     # via
     #   -r requirements-dev.in
     #   pytest-cov
diff --git a/backend/multi-account/control-tower/requirements.in b/backend/multi-account/control-tower/requirements.in
index 59d6210b4..44533fa1e 100644
--- a/backend/multi-account/control-tower/requirements.in
+++ b/backend/multi-account/control-tower/requirements.in
@@ -1,3 +1,3 @@
-aws-cdk-lib>=2.251.0
+aws-cdk-lib>=2.253.1
 constructs>=10.6.0,<11.0.0
-cdk-nag>=2.37.55,<3
+cdk-nag>=2.38.2,<3
diff --git a/backend/multi-account/control-tower/requirements.txt b/backend/multi-account/control-tower/requirements.txt
index 73124ad7b..2fabdb27b 100644
--- a/backend/multi-account/control-tower/requirements.txt
+++ b/backend/multi-account/control-tower/requirements.txt
@@ -14,13 +14,13 @@ aws-cdk-asset-node-proxy-agent-v6==2.1.1
     # via aws-cdk-lib
 aws-cdk-cloud-assembly-schema==53.20.0
     # via aws-cdk-lib
-aws-cdk-lib==2.251.0
+aws-cdk-lib==2.253.1
     # via
     #   -r requirements.in
     #   cdk-nag
 cattrs==25.3.0
     # via jsii
-cdk-nag==2.38.1
+cdk-nag==2.38.2
     # via -r requirements.in
 constructs==10.6.0
     # via
diff --git a/backend/multi-account/log-aggregation/requirements.in b/backend/multi-account/log-aggregation/requirements.in
index 3e1ae5c7d..eb38dfd2c 100644
--- a/backend/multi-account/log-aggregation/requirements.in
+++ b/backend/multi-account/log-aggregation/requirements.in
@@ -1,2 +1,2 @@
-aws-cdk-lib>=2.251.0
+aws-cdk-lib>=2.253.1
 constructs>=10.6.0,<11.0.0
diff --git a/backend/multi-account/log-aggregation/requirements.txt b/backend/multi-account/log-aggregation/requirements.txt
index abc2e171f..9bd5cd471 100644
--- a/backend/multi-account/log-aggregation/requirements.txt
+++ b/backend/multi-account/log-aggregation/requirements.txt
@@ -14,7 +14,7 @@ aws-cdk-asset-node-proxy-agent-v6==2.1.1
     # via aws-cdk-lib
 aws-cdk-cloud-assembly-schema==53.20.0
     # via aws-cdk-lib
-aws-cdk-lib==2.251.0
+aws-cdk-lib==2.253.1
     # via -r requirements.in
 cattrs==25.3.0
     # via jsii