diff --git a/CHANGELOG.md b/CHANGELOG.md
index d2b0db7..152f28e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -298,3 +298,8 @@
 * 2.4.8 -- 2023-09-28
   - terraform-state
     - add `sso_permissionset_names` for use of assume role by SSO roles
+
+* 2.4.9 -- 2023-10-06
+  - ldap-ou-create
+    - update ldap.e to ldap2.e
+
diff --git a/common/version.tf b/common/version.tf
index 5610dbc..9dee71d 100644
--- a/common/version.tf
+++ b/common/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "2.4.8"
+  _module_version = "2.4.9"
 }
diff --git a/ldap-ou-create/README.md b/ldap-ou-create/README.md
index 27b311b..fa66224 100644
--- a/ldap-ou-create/README.md
+++ b/ldap-ou-create/README.md
@@ -20,7 +20,7 @@ module "ou" {
 
   # optional
   # account_id               = "123456789012"
-  ldap_url                   = "ldaps://ldap.e.tco.census.gov"
+  ldap_url                   = "ldaps://ldap2.e.tco.census.gov"
 }
 ```
 
@@ -56,6 +56,7 @@ No modules.
 | [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
 | [aws_iam_policy_document.ec2_assume](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
 | [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source |
+| [aws_regions.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/regions) | data source |
 | [template_file.ou](https://registry.terraform.io/providers/hashicorp/template/latest/docs/data-sources/file) | data source |
 
 ## Inputs
@@ -68,7 +69,7 @@ No modules.
 | <a name="input_enable_ldap_creation"></a> [enable\_ldap\_creation](#input\_enable\_ldap\_creation) | Flag to enable/disable LDAP object creation for role group (for SAML only). Also requires LDAP credentials. | `bool` | `false` | no |
 | <a name="input_ldap_password"></a> [ldap\_password](#input\_ldap\_password) | LDAP password for ldap\_user for writing data into eDirectory or Active Directory | `string` | `""` | no |
 | <a name="input_ldap_skip_verify"></a> [ldap\_skip\_verify](#input\_ldap\_skip\_verify) | LDAP skip verify of TLS certificates | `bool` | `false` | no |
-| <a name="input_ldap_url"></a> [ldap\_url](#input\_ldap\_url) | LDAP URL in form ldap(s)://hostname:port | `string` | `"ldaps://ldap.e.tco.census.gov"` | no |
+| <a name="input_ldap_url"></a> [ldap\_url](#input\_ldap\_url) | LDAP URL in form ldap(s)://hostname:port | `string` | `"ldaps://ldap2.e.tco.census.gov"` | no |
 | <a name="input_ldap_use_starttls"></a> [ldap\_use\_starttls](#input\_ldap\_use\_starttls) | LDAP use StartTLS (needed only if port is 389, perhaps) | `bool` | `false` | no |
 | <a name="input_ldap_user"></a> [ldap\_user](#input\_ldap\_user) | LDAP user for writing data into eDirectory or Active Directory | `string` | `""` | no |
 | <a name="input_override_prefixes"></a> [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component (efs, s3, ebs, kms, role, policy, security-group). This should be used primarily for common infrastructure things | `map(string)` | `{}` | no |
diff --git a/ldap-ou-create/main.tf b/ldap-ou-create/main.tf
index 5d4e323..8d2cb1a 100644
--- a/ldap-ou-create/main.tf
+++ b/ldap-ou-create/main.tf
@@ -21,7 +21,7 @@
 * 
 *   # optional
 *   # account_id               = "123456789012"
-*   ldap_url                   = "ldaps://ldap.e.tco.census.gov"
+*   ldap_url                   = "ldaps://ldap2.e.tco.census.gov"
 * }
 * ```
 */
diff --git a/ldap-ou-create/variables.tf b/ldap-ou-create/variables.tf
index 2c03b51..70fb87f 100644
--- a/ldap-ou-create/variables.tf
+++ b/ldap-ou-create/variables.tf
@@ -31,7 +31,7 @@ variable "ldap_password" {
 ## variable "ldap_host" {
 ##   description = "LDAP Hostname (default is for eBOCAS)"
 ##   type        = string
-##   default     = "ldap.e.tco.census.gov"
+##   default     = "ldap2.e.tco.census.gov"
 ## }
 ## 
 ## variable "ldap_port" {
@@ -44,7 +44,7 @@ variable "ldap_password" {
 variable "ldap_url" {
   description = "LDAP URL in form ldap(s)://hostname:port"
   type        = string
-  default     = "ldaps://ldap.e.tco.census.gov"
+  default     = "ldaps://ldap2.e.tco.census.gov"
 }
 
 variable "ldap_use_starttls" {