diff --git a/CHANGELOG.md b/CHANGELOG.md
index e9e51af..a261902 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -35,3 +35,7 @@
     - add `import_to_acm` (true) 
   - acmpca-iam-rolesanywhere
     - add `import_to_acm` (true) 
+
+* 1.2.1 -- 2025-03-06
+  - acmpca-eks-cert-manager
+    - un-hardcode validity_days from 365 to use the variable (due to the ACMPCA issuer lifetime being less than one year right now)
diff --git a/acmpca-eks-cert-manager/main.tf b/acmpca-eks-cert-manager/main.tf
index 79b628e..2e5226a 100644
--- a/acmpca-eks-cert-manager/main.tf
+++ b/acmpca-eks-cert-manager/main.tf
@@ -89,8 +89,9 @@ module "certificate" {
   certificate_authority_mode    = "general"
   certificate_type              = "subordinate-ca"
   certificate_subject_overrides = { ou = "PKI-EKS" }
-  validity_days                 = 365
-  import_to_acm                 = var.import_to_acm
+  #  validity_days                 = 365
+  validity_days = var.validity_days
+  import_to_acm = var.import_to_acm
 
   tags = merge(
     local.base_tags,
diff --git a/common/version.tf b/common/version.tf
index 1ee6619..54b3493 100644
--- a/common/version.tf
+++ b/common/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "1.2.0"
+  _module_version = "1.2.1"
 }