diff --git a/terraform/environments/bootstrap/secure-baselines/main.tf b/terraform/environments/bootstrap/secure-baselines/main.tf
index 6ee71c9d4..bc220eefc 100644
--- a/terraform/environments/bootstrap/secure-baselines/main.tf
+++ b/terraform/environments/bootstrap/secure-baselines/main.tf
@@ -6,7 +6,7 @@ data "aws_kms_key" "cloudtrail_key" {
 
 #trivy:ignore:AVD-AWS-0136
 module "baselines" {
-  source = "github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=f737104c63122ec92d82ddc376ed458801d14d2a" # point to 'feature/add-unit-tests' branch on baselines module
+  source = "github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=957a6ca5f5a4e81fa6fa7799a8e060b630bc14ab" # v7.2.0
 
   providers = {
     # Default and replication regions
diff --git a/terraform/modernisation-platform-account/baselines.tf b/terraform/modernisation-platform-account/baselines.tf
index 6a9a26904..9c62e629e 100644
--- a/terraform/modernisation-platform-account/baselines.tf
+++ b/terraform/modernisation-platform-account/baselines.tf
@@ -18,7 +18,7 @@ locals {
 # Secure baselines (GuardDuty, Config, SecurityHub, etc)
 #trivy:ignore:AVD-AWS-0136 trivy:ignore:AVD-AWS-0132
 module "baselines-modernisation-platform" {
-  source = "github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=2a59110767bd30e949b242818da7dbe72fe9481b" # v7.1.0
+  source = "github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=957a6ca5f5a4e81fa6fa7799a8e060b630bc14ab" # v7.2.0
   providers = {
     # Default and replication regions
     aws                    = aws.modernisation-platform-eu-west-2