diff --git a/.ci/providerlint/go.mod b/.ci/providerlint/go.mod
index 336035c3e21..8cc00ff158d 100644
--- a/.ci/providerlint/go.mod
+++ b/.ci/providerlint/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/terraform-provider-aws/ci/providerlint
 
-go 1.22.7
+go 1.23.1
 
 require (
 	github.com/bflad/tfproviderlint v0.30.0
diff --git a/.ci/tools/go.mod b/.ci/tools/go.mod
index fad6ca2bbfb..e6f8fffd2cd 100644
--- a/.ci/tools/go.mod
+++ b/.ci/tools/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/terraform-provider-aws/tools
 
-go 1.23.0
+go 1.23.1
 
 require (
 	github.com/YakDriver/tfproviderdocs v0.14.3
diff --git a/go.mod b/go.mod
index 98983536d67..aadbf51f404 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,10 @@
 module github.com/hashicorp/terraform-provider-aws
 
-go 1.22.7
+go 1.23.1
+
+// Disable experimental post-quantum key exchange mechanism X25519Kyber768Draft00
+// This was causing errors with AWS Network Firewall
+godebug tlskyber=0
 
 require (
 	github.com/ProtonMail/go-crypto v1.1.0-alpha.5-proton
diff --git a/tools/awssdkpatch/go.mod b/tools/awssdkpatch/go.mod
index 744b2531d18..ad42ba3c73e 100644
--- a/tools/awssdkpatch/go.mod
+++ b/tools/awssdkpatch/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/terraform-provider-aws/tools/awssdkpatch
 
-go 1.22.7
+go 1.23.1
 
 require (
 	github.com/hashicorp/terraform-provider-aws v1.60.1-0.20220322001452-8f7a597d0c24
diff --git a/tools/literally/go.mod b/tools/literally/go.mod
index 48353406344..f0de8442715 100644
--- a/tools/literally/go.mod
+++ b/tools/literally/go.mod
@@ -1,3 +1,3 @@
 module github.com/hashicorp/terraform-provider-aws/tools/literally
 
-go 1.23.0
+go 1.23.1
diff --git a/tools/tfsdk2fw/go.mod b/tools/tfsdk2fw/go.mod
index fc479eba876..23fa4f165f7 100644
--- a/tools/tfsdk2fw/go.mod
+++ b/tools/tfsdk2fw/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/terraform-provider-aws/tools/tfsdk2fw
 
-go 1.22.7
+go 1.23.1
 
 require (
 	github.com/hashicorp/terraform-plugin-sdk/v2 v2.34.0