diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index ba2ba8f..903ca77 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -26,7 +26,7 @@
   "modules/aws-route53-zones": "0.1.0",
   "modules/aws-mongodbatlas-access": "0.1.0",
   "modules/aws-centralized-logging": "0.1.0",
-  "modules/aws-waf": "0.4.0",
+  "modules/aws-waf": "0.4.1",
   "modules/aws-elasticsearch": "0.1.0",
   "modules/aws-msk-apache-kafka-cluster-master": "0.2.2",
   "modules/aws-guardduty-master": "0.1.0",
diff --git a/modules/aws-waf/CHANGELOG.md b/modules/aws-waf/CHANGELOG.md
index 10499a6..fbdcf0c 100644
--- a/modules/aws-waf/CHANGELOG.md
+++ b/modules/aws-waf/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.4.1](https://github.com/kloia/platform-modules/compare/aws-waf-v0.4.0...aws-waf-v0.4.1) (2026-09-02)
+
+
+### Bug Fixes
+
+* **aws-waf:** trigger release-please for [#343](https://github.com/kloia/platform-modules/issues/343) ([#348](https://github.com/kloia/platform-modules/issues/348)) ([92f4254](https://github.com/kloia/platform-modules/commit/92f4254676eca4b1ccaec196d984e602249aa661))
+
 ## [0.4.0](https://github.com/kloia/platform-modules/compare/aws-waf-v0.3.0...aws-waf-v0.4.0) (2026-09-02)
 
 
diff --git a/modules/aws-waf/versions.tf b/modules/aws-waf/versions.tf
index 752c4ad..81be97d 100644
--- a/modules/aws-waf/versions.tf
+++ b/modules/aws-waf/versions.tf
@@ -3,7 +3,7 @@ terraform {
     aws = {
       source = "hashicorp/aws"
       # rule_action_override + managed_rule_group_configs.aws_managed_rules_anti_ddos_rule_set
-      # require v0.4.0 (https://github.com/hashicorp/terraform-provider-aws/blob/v0.4.0/CHANGELOG.md,
+      # require v0.4.1 (https://github.com/hashicorp/terraform-provider-aws/blob/v0.4.1/CHANGELOG.md,
       # PR #43149). Callers not using those fields still work on older 6.x,
       # but pinning here prevents a stale lock file from silently resolving
       # a provider that predates this schema.