diff --git a/ois-scanner/main.tf b/ois-scanner/main.tf
index 21cdcde..83ed4e9 100644
--- a/ois-scanner/main.tf
+++ b/ois-scanner/main.tf
@@ -25,7 +25,7 @@ locals {
 
 module "ois-scanner" {
   source = "terraform-aws-modules/security-group/aws"
-  version < 3
+  version = "2"
 
   name = "${local.name}"
   description = "common: allows OIS scanners and OIS subnets full access for compliance scanning"