diff --git a/README.md b/README.md
index aa44b66..5a319e8 100644
--- a/README.md
+++ b/README.md
@@ -86,14 +86,14 @@ this fact.
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.69 |
 
 ## Providers
 
 | Name | Version |
 |------|---------|
-| <a name="provider_aws.hub"></a> [aws.hub](#provider\_aws.hub) | >= 5 |
-| <a name="provider_aws.satellite"></a> [aws.satellite](#provider\_aws.satellite) | >= 5 |
+| <a name="provider_aws.hub"></a> [aws.hub](#provider\_aws.hub) | >= 5.69 |
+| <a name="provider_aws.satellite"></a> [aws.satellite](#provider\_aws.satellite) | >= 5.69 |
 
 ## Modules
 
@@ -137,6 +137,7 @@ No modules.
 | <a name="input_route_private_subnets_via_tgw"></a> [route\_private\_subnets\_via\_tgw](#input\_route\_private\_subnets\_via\_tgw) | Use TGW attachment as a default route (0.0.0.0/0) for private subnets. Value `satellite_destination_cidr_block`s will be ignored. | `bool` | `false` | no |
 | <a name="input_satellite_create"></a> [satellite\_create](#input\_satellite\_create) | Boolean flag for toggling the handling of satellite resources | `bool` | `false` | no |
 | <a name="input_satellite_destination_cidr_blocks"></a> [satellite\_destination\_cidr\_blocks](#input\_satellite\_destination\_cidr\_blocks) | List of CIDRs to be routed for the satellite | `list(string)` | `[]` | no |
+| <a name="input_security_group_referencing_support"></a> [security\_group\_referencing\_support](#input\_security\_group\_referencing\_support) | Whether Security Group Referencing Support is enabled. | `string` | `"disable"` | no |
 | <a name="input_transit_gateway_default_route_table_association"></a> [transit\_gateway\_default\_route\_table\_association](#input\_transit\_gateway\_default\_route\_table\_association) | Set this to false when the hub account also becomes a satellite. Check the official docs for more info. | `bool` | `true` | no |
 | <a name="input_transit_gateway_default_route_table_propagation"></a> [transit\_gateway\_default\_route\_table\_propagation](#input\_transit\_gateway\_default\_route\_table\_propagation) | Set this to false when the hub account also becomes a satellite. Check the official docs for more info. | `bool` | `true` | no |
 | <a name="input_transit_gateway_hub_name"></a> [transit\_gateway\_hub\_name](#input\_transit\_gateway\_hub\_name) | Name of the Transit Gateway to attach to | `string` | `""` | no |
diff --git a/examples/satellite-all/README.md b/examples/satellite-all/README.md
index a4ed4c3..71c8095 100644
--- a/examples/satellite-all/README.md
+++ b/examples/satellite-all/README.md
@@ -6,7 +6,7 @@
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.69 |
 
 ## Providers
 
@@ -38,6 +38,7 @@ No resources.
 | <a name="input_route_private_subnets_via_tgw"></a> [route\_private\_subnets\_via\_tgw](#input\_route\_private\_subnets\_via\_tgw) | Use TGW attachment as a default route (0.0.0.0/0) for private subnets. Value `satellite_destination_cidr_block`s will be ignored. | `bool` | `false` | no |
 | <a name="input_satellite_create"></a> [satellite\_create](#input\_satellite\_create) | Boolean flag for toggling the handling of satellite resources | `bool` | `false` | no |
 | <a name="input_satellite_destination_cidr_blocks"></a> [satellite\_destination\_cidr\_blocks](#input\_satellite\_destination\_cidr\_blocks) | List of CIDRs to be routed for the satellite | `list(string)` | `[]` | no |
+| <a name="input_security_group_referencing_support"></a> [security\_group\_referencing\_support](#input\_security\_group\_referencing\_support) | Whether Security Group Referencing Support is enabled. | `string` | `"disable"` | no |
 | <a name="input_transit_gateway_hub_name"></a> [transit\_gateway\_hub\_name](#input\_transit\_gateway\_hub\_name) | Name of the Transit Gateway to attach to | `string` | `""` | no |
 | <a name="input_transit_gateway_id"></a> [transit\_gateway\_id](#input\_transit\_gateway\_id) | Identifier of the Transit Gateway | `string` | `""` | no |
 | <a name="input_vpc_name_to_attach"></a> [vpc\_name\_to\_attach](#input\_vpc\_name\_to\_attach) | Name of the satellite VPC to be attached to the TGW | `string` | `""` | no |
diff --git a/examples/satellite-all/main.tf b/examples/satellite-all/main.tf
index 67ab03e..9ee5f13 100644
--- a/examples/satellite-all/main.tf
+++ b/examples/satellite-all/main.tf
@@ -39,5 +39,7 @@ module "tgw-satellite" {
 
   private_subnet_filters = var.private_subnet_filters
 
+  security_group_referencing_support = var.security_group_referencing_support
+
   depends_on = [module.tgw]
 }
diff --git a/examples/satellite-all/variables.auto.tfvars b/examples/satellite-all/variables.auto.tfvars
index 264e7dc..42efe53 100644
--- a/examples/satellite-all/variables.auto.tfvars
+++ b/examples/satellite-all/variables.auto.tfvars
@@ -30,3 +30,5 @@ private_subnet_filters = [
     values = ["eu-central-1a", "eu-central-1b"]
   }
 ]
+
+security_group_referencing_support = "enable"
diff --git a/examples/satellite-all/variables.tf b/examples/satellite-all/variables.tf
index 3928db0..f263490 100644
--- a/examples/satellite-all/variables.tf
+++ b/examples/satellite-all/variables.tf
@@ -93,3 +93,9 @@ variable "route_entire_satellite_vpc" {
   type        = bool
   default     = false
 }
+
+variable "security_group_referencing_support" {
+  description = "Whether Security Group Referencing Support is enabled."
+  type        = string
+  default     = "disable"
+}
diff --git a/examples/satellite-all/versions.tf b/examples/satellite-all/versions.tf
index 5ef3c40..48c017e 100644
--- a/examples/satellite-all/versions.tf
+++ b/examples/satellite-all/versions.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 5"
+      version = ">= 5.69"
     }
   }
   required_version = ">= 1.0"
diff --git a/examples/satellite-default-route-all/README.md b/examples/satellite-default-route-all/README.md
index a4ed4c3..3792576 100644
--- a/examples/satellite-default-route-all/README.md
+++ b/examples/satellite-default-route-all/README.md
@@ -6,7 +6,7 @@
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.69 |
 
 ## Providers
 
diff --git a/examples/satellite-default-route-all/versions.tf b/examples/satellite-default-route-all/versions.tf
index 5ef3c40..48c017e 100644
--- a/examples/satellite-default-route-all/versions.tf
+++ b/examples/satellite-default-route-all/versions.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 5"
+      version = ">= 5.69"
     }
   }
   required_version = ">= 1.0"
diff --git a/examples/satellite-default-route/README.md b/examples/satellite-default-route/README.md
index a4ed4c3..3792576 100644
--- a/examples/satellite-default-route/README.md
+++ b/examples/satellite-default-route/README.md
@@ -6,7 +6,7 @@
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.69 |
 
 ## Providers
 
diff --git a/examples/satellite-default-route/versions.tf b/examples/satellite-default-route/versions.tf
index 5ef3c40..48c017e 100644
--- a/examples/satellite-default-route/versions.tf
+++ b/examples/satellite-default-route/versions.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 5"
+      version = ">= 5.69"
     }
   }
   required_version = ">= 1.0"
diff --git a/examples/satellite/README.md b/examples/satellite/README.md
index c8fb6af..f68c3c2 100644
--- a/examples/satellite/README.md
+++ b/examples/satellite/README.md
@@ -6,7 +6,7 @@
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.69 |
 
 ## Providers
 
diff --git a/examples/satellite/versions.tf b/examples/satellite/versions.tf
index 5ef3c40..48c017e 100644
--- a/examples/satellite/versions.tf
+++ b/examples/satellite/versions.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 5"
+      version = ">= 5.69"
     }
   }
   required_version = ">= 1.0"
diff --git a/main.tf b/main.tf
index afc79c8..d3cd036 100644
--- a/main.tf
+++ b/main.tf
@@ -8,6 +8,8 @@ resource "aws_ec2_transit_gateway_vpc_attachment" "this" {
   transit_gateway_default_route_table_association = var.transit_gateway_default_route_table_association
   transit_gateway_default_route_table_propagation = var.transit_gateway_default_route_table_propagation
 
+  security_group_referencing_support = var.security_group_referencing_support
+
   # When we create the TGW and the association through RAM in one run, we need
   # this to escape the race condition.
   depends_on = [var.ram_resource_association_id]
diff --git a/variables.tf b/variables.tf
index b564367..d004e04 100644
--- a/variables.tf
+++ b/variables.tf
@@ -114,3 +114,9 @@ variable "transit_gateway_default_route_table_propagation" {
   type        = bool
   default     = true
 }
+
+variable "security_group_referencing_support" {
+  description = "Whether Security Group Referencing Support is enabled."
+  type        = string
+  default     = "disable"
+}
diff --git a/versions.tf b/versions.tf
index f068719..b271293 100644
--- a/versions.tf
+++ b/versions.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 5"
+      version = ">= 5.69"
       configuration_aliases = [
         aws.hub,
         aws.satellite