diff --git a/CHANGELOG.md b/CHANGELOG.md
index a47ebcd99d..ba2ff972b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 
 * Feature - [Add an environment variable to limit the number of ENIs](https://github.com/aws/amazon-vpc-cni-k8s/pull/251)
 * Feature - [Randomise outgoing port for connections in the SNAT iptables rule](https://github.com/aws/amazon-vpc-cni-k8s/pull/246)
+* Improvement - [Update Calico to 3.3.6](https://github.com/aws/amazon-vpc-cni-k8s/pull/368)
 * Improvement - [Add new instance types](https://github.com/aws/amazon-vpc-cni-k8s/pull/366)
 * Improvement - [Actually enable prometheus metrics](https://github.com/aws/amazon-vpc-cni-k8s/pull/361)
 * Improvement - [Retry LinkByMac when link not found](https://github.com/aws/amazon-vpc-cni-k8s/pull/360)
diff --git a/config/v1.4/aws-k8s-cni.yaml b/config/v1.4/aws-k8s-cni.yaml
index 615d3ce469..3f1b8d7d25 100644
--- a/config/v1.4/aws-k8s-cni.yaml
+++ b/config/v1.4/aws-k8s-cni.yaml
@@ -70,7 +70,7 @@ spec:
       - operator: Exists
       containers:
       # Note! Release candidate image
-      - image: 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni:v1.4.0-rc0
+      - image: 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon-k8s-cni:v1.4.0-rc1
         imagePullPolicy: Always
         ports:
         - containerPort: 61678