diff --git a/fleet_integration/aws.cloudtrail.aws-s3/README.md b/fleet_integration/aws.cloudtrail.aws-s3/README.md
index d4d8142..9f7224b 100644
--- a/fleet_integration/aws.cloudtrail.aws-s3/README.md
+++ b/fleet_integration/aws.cloudtrail.aws-s3/README.md
@@ -38,7 +38,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.2"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.3"` | no |
 | <a name="input_interval"></a> [interval](#input\_interval) | Time interval for polling listing of the S3 bucket. NOTE: Supported units for this parameter are h/m/s. | `string` | `"1m"` | no |
 | <a name="input_max_number_of_messages"></a> [max\_number\_of\_messages](#input\_max\_number\_of\_messages) | The maximum number of SQS messages that can be inflight at any time. Defaults to 5. When processing large amount of large size S3 objects and each object has large amount of events, if this parameter sets too high, it can cause the input to process too many messages concurrently, overload the agent and cause ingest failure. We recommend to keep the default value 5 and use the [preset](https://www.elastic.co/guide/en/fleet/current/es-output-settings.html#es-output-settings-performance-tuning-settings) option to tune your Elastic Agent performance. You can optimize for throughput, scale, latency, or you can choose a balanced (the default) set of performance specifications. | `number` | `5` | no |
 | <a name="input_number_of_workers"></a> [number\_of\_workers](#input\_number\_of\_workers) | Number of workers that will process the S3 objects listed. | `number` | `5` | no |
diff --git a/fleet_integration/aws.cloudtrail.aws-s3/module.tf.json b/fleet_integration/aws.cloudtrail.aws-s3/module.tf.json
index 612498d..6512e73 100644
--- a/fleet_integration/aws.cloudtrail.aws-s3/module.tf.json
+++ b/fleet_integration/aws.cloudtrail.aws-s3/module.tf.json
@@ -88,7 +88,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws package to use.",
-      "default": "2.31.2"
+      "default": "2.31.3"
     },
     "interval": {
       "type": "string",
diff --git a/fleet_integration/aws.guardduty.aws-s3/README.md b/fleet_integration/aws.guardduty.aws-s3/README.md
index a13d43b..59d0abd 100644
--- a/fleet_integration/aws.guardduty.aws-s3/README.md
+++ b/fleet_integration/aws.guardduty.aws-s3/README.md
@@ -36,7 +36,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.2"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.3"` | no |
 | <a name="input_interval"></a> [interval](#input\_interval) | Time interval for polling listing of the S3 bucket. NOTE: Supported units for this parameter are h/m/s. | `string` | `"1m"` | no |
 | <a name="input_max_number_of_messages"></a> [max\_number\_of\_messages](#input\_max\_number\_of\_messages) | The maximum number of SQS messages that can be inflight at any time. Defaults to 5. When processing large amount of large size S3 objects and each object has large amount of events, if this parameter sets too high, it can cause the input to process too many messages concurrently, overload the agent and cause ingest failure. We recommend to keep the default value 5 and use the [preset](https://www.elastic.co/guide/en/fleet/current/es-output-settings.html#es-output-settings-performance-tuning-settings) option to tune your Elastic Agent performance. You can optimize for throughput, scale, latency, or you can choose a balanced (the default) set of performance specifications. | `number` | `5` | no |
 | <a name="input_number_of_workers"></a> [number\_of\_workers](#input\_number\_of\_workers) | Number of workers that will process the S3 objects listed. | `number` | `5` | no |
diff --git a/fleet_integration/aws.guardduty.aws-s3/module.tf.json b/fleet_integration/aws.guardduty.aws-s3/module.tf.json
index d1f87af..f098a5b 100644
--- a/fleet_integration/aws.guardduty.aws-s3/module.tf.json
+++ b/fleet_integration/aws.guardduty.aws-s3/module.tf.json
@@ -78,7 +78,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws package to use.",
-      "default": "2.31.2"
+      "default": "2.31.3"
     },
     "interval": {
       "type": "string",
diff --git a/fleet_integration/aws.guardduty.httpjson/README.md b/fleet_integration/aws.guardduty.httpjson/README.md
index ed1cb3d..7fb9ecf 100644
--- a/fleet_integration/aws.guardduty.httpjson/README.md
+++ b/fleet_integration/aws.guardduty.httpjson/README.md
@@ -31,7 +31,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.2"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.3"` | no |
 | <a name="input_http_client_timeout"></a> [http\_client\_timeout](#input\_http\_client\_timeout) | Duration of the time limit on HTTP requests. Note: Valid time units are ns, us, ms, s, m, h. | `string` | `"30s"` | no |
 | <a name="input_initial_interval"></a> [initial\_interval](#input\_initial\_interval) | How far back to pull the Amazon GuardDuty Findings from AWS. NOTE: Supported units for this parameter are h/m/s. | `string` | `"24h"` | no |
 | <a name="input_interval"></a> [interval](#input\_interval) | Interval to fetch Amazon GuardDuty Findings from AWS. NOTE: Supported units for this parameter are h/m/s. | `string` | `"1m"` | no |
diff --git a/fleet_integration/aws.guardduty.httpjson/module.tf.json b/fleet_integration/aws.guardduty.httpjson/module.tf.json
index 0937cdd..2488e6c 100644
--- a/fleet_integration/aws.guardduty.httpjson/module.tf.json
+++ b/fleet_integration/aws.guardduty.httpjson/module.tf.json
@@ -52,7 +52,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws package to use.",
-      "default": "2.31.2"
+      "default": "2.31.3"
     },
     "http_client_timeout": {
       "type": "string",
diff --git a/fleet_integration/aws.securityhub.securityhub_findings.httpjson/README.md b/fleet_integration/aws.securityhub.securityhub_findings.httpjson/README.md
index 367bc24..09f27ab 100644
--- a/fleet_integration/aws.securityhub.securityhub_findings.httpjson/README.md
+++ b/fleet_integration/aws.securityhub.securityhub_findings.httpjson/README.md
@@ -30,7 +30,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.2"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.3"` | no |
 | <a name="input_initial_interval"></a> [initial\_interval](#input\_initial\_interval) | How far back to pull the AWS Security Hub Findings from AWS. (Initial Interval should be greater than 1 hour.) | `string` | `"24h"` | no |
 | <a name="input_interval"></a> [interval](#input\_interval) | Interval to fetch AWS Security Hub Findings from AWS. (Interval should be greater than 1 hour.) | `string` | `"1h"` | no |
 | <a name="input_preserve_duplicate_custom_fields"></a> [preserve\_duplicate\_custom\_fields](#input\_preserve\_duplicate\_custom\_fields) | Preserve aws.security\_findings fields that were copied to Elastic Common Schema (ECS) fields. | `bool` | `false` | no |
diff --git a/fleet_integration/aws.securityhub.securityhub_findings.httpjson/module.tf.json b/fleet_integration/aws.securityhub.securityhub_findings.httpjson/module.tf.json
index e51e02a..33da59e 100644
--- a/fleet_integration/aws.securityhub.securityhub_findings.httpjson/module.tf.json
+++ b/fleet_integration/aws.securityhub.securityhub_findings.httpjson/module.tf.json
@@ -47,7 +47,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws package to use.",
-      "default": "2.31.2"
+      "default": "2.31.3"
     },
     "initial_interval": {
       "type": "string",
diff --git a/fleet_integration/aws.securityhub.securityhub_insights.httpjson/README.md b/fleet_integration/aws.securityhub.securityhub_insights.httpjson/README.md
index 7b268f1..8323e19 100644
--- a/fleet_integration/aws.securityhub.securityhub_insights.httpjson/README.md
+++ b/fleet_integration/aws.securityhub.securityhub_insights.httpjson/README.md
@@ -30,7 +30,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.2"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"2.31.3"` | no |
 | <a name="input_interval"></a> [interval](#input\_interval) | Interval to fetch AWS Security Hub Insights from AWS. | `string` | `"1m"` | no |
 | <a name="input_preserve_duplicate_custom_fields"></a> [preserve\_duplicate\_custom\_fields](#input\_preserve\_duplicate\_custom\_fields) | Preserve aws.security\_insights fields that were copied to Elastic Common Schema (ECS) fields. | `bool` | `false` | no |
 | <a name="input_preserve_original_event"></a> [preserve\_original\_event](#input\_preserve\_original\_event) | Preserves a raw copy of the original event, added to the field `event.original`. | `bool` | `false` | no |
diff --git a/fleet_integration/aws.securityhub.securityhub_insights.httpjson/module.tf.json b/fleet_integration/aws.securityhub.securityhub_insights.httpjson/module.tf.json
index d265bd6..6404abe 100644
--- a/fleet_integration/aws.securityhub.securityhub_insights.httpjson/module.tf.json
+++ b/fleet_integration/aws.securityhub.securityhub_insights.httpjson/module.tf.json
@@ -47,7 +47,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws package to use.",
-      "default": "2.31.2"
+      "default": "2.31.3"
     },
     "interval": {
       "type": "string",
diff --git a/fleet_integration/aws_logs.generic.aws-cloudwatch/README.md b/fleet_integration/aws_logs.generic.aws-cloudwatch/README.md
index 684974c..f7b96e1 100644
--- a/fleet_integration/aws_logs.generic.aws-cloudwatch/README.md
+++ b/fleet_integration/aws_logs.generic.aws-cloudwatch/README.md
@@ -33,7 +33,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws\_logs package to use. | `string` | `"1.4.0"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws\_logs package to use. | `string` | `"1.4.1"` | no |
 | <a name="input_latency"></a> [latency](#input\_latency) | The amount of time required for the logs to be available to CloudWatch Logs. Sample values, `1m` or `5m` — see Golang [time.ParseDuration](https://pkg.go.dev/time#ParseDuration) for more details. Latency translates the query's time range to consider the CloudWatch Logs latency. Example: `5m` means that the integration will query CloudWatch to search for logs available 5 minutes ago. | `string` | `null` | no |
 | <a name="input_log_group_arn"></a> [log\_group\_arn](#input\_log\_group\_arn) | ARN of the log group to collect logs from. | `string` | `null` | no |
 | <a name="input_log_group_name"></a> [log\_group\_name](#input\_log\_group\_name) | Name of the log group to collect logs from. `region_name` is required when `log_group_name` is given. | `string` | `null` | no |
@@ -41,7 +41,6 @@ No resources.
 | <a name="input_log_stream_prefix"></a> [log\_stream\_prefix](#input\_log\_stream\_prefix) | A string to filter the results to include only log events from log streams that have names starting with this prefix. | `string` | `null` | no |
 | <a name="input_log_streams"></a> [log\_streams](#input\_log\_streams) | A list of strings of log streams names that Filebeat collect log events from. | `list(string)` | `null` | no |
 | <a name="input_number_of_workers"></a> [number\_of\_workers](#input\_number\_of\_workers) | The number of workers assigned to read from log groups. Each worker will read log events from one of the log groups matching `log_group_name_prefix`. For example, if `log_group_name_prefix` matches five log groups, then `number_of_workers` should be set to `5`. The default value is `1`. | `number` | `1` | no |
-| <a name="input_pipeline"></a> [pipeline](#input\_pipeline) | The Ingest Node pipeline ID to be used by the integration. | `string` | `null` | no |
 | <a name="input_preserve_original_event"></a> [preserve\_original\_event](#input\_preserve\_original\_event) | Preserves a raw copy of the original event, added to the field `event.original` | `bool` | `false` | no |
 | <a name="input_processors_yaml"></a> [processors\_yaml](#input\_processors\_yaml) | Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. | `string` | `null` | no |
 | <a name="input_proxy_url"></a> [proxy\_url](#input\_proxy\_url) | URL to proxy connections in the form of http\[s\]://<user>:<password>@<server name/ip>:<port> | `string` | `null` | no |
diff --git a/fleet_integration/aws_logs.generic.aws-cloudwatch/module.tf.json b/fleet_integration/aws_logs.generic.aws-cloudwatch/module.tf.json
index 22fdf83..e5808b6 100644
--- a/fleet_integration/aws_logs.generic.aws-cloudwatch/module.tf.json
+++ b/fleet_integration/aws_logs.generic.aws-cloudwatch/module.tf.json
@@ -63,7 +63,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws_logs package to use.",
-      "default": "1.4.0"
+      "default": "1.4.1"
     },
     "latency": {
       "type": "string",
@@ -100,11 +100,6 @@
       "description": "The number of workers assigned to read from log groups. Each worker will read log events from one of the log groups matching `log_group_name_prefix`. For example, if `log_group_name_prefix` matches five log groups, then `number_of_workers` should be set to `5`. The default value is `1`.",
       "default": 1
     },
-    "pipeline": {
-      "type": "string",
-      "description": "The Ingest Node pipeline ID to be used by the integration.\n",
-      "default": null
-    },
     "preserve_original_event": {
       "type": "bool",
       "description": "Preserves a raw copy of the original event, added to the field `event.original`",
@@ -180,7 +175,7 @@
         "aws_logs-aws-cloudwatch"
       ],
       "data_stream": "generic",
-      "data_stream_variables_json": "${jsonencode({\n  api_sleep = var.api_sleep\n  api_timeput = var.api_timeput\n  custom = var.custom_yaml\n  \"data_stream.dataset\" = var.data_stream_dataset\n  latency = var.latency\n  log_group_arn = var.log_group_arn\n  log_group_name = var.log_group_name\n  log_group_name_prefix = var.log_group_name_prefix\n  log_stream_prefix = var.log_stream_prefix\n  log_streams = var.log_streams\n  number_of_workers = var.number_of_workers\n  pipeline = var.pipeline\n  preserve_original_event = var.preserve_original_event\n  processors = var.processors_yaml\n  region_name = var.region_name\n  scan_frequency = var.scan_frequency\n  start_position = var.start_position\n  tags = var.tags\n})}",
+      "data_stream_variables_json": "${jsonencode({\n  api_sleep = var.api_sleep\n  api_timeput = var.api_timeput\n  custom = var.custom_yaml\n  \"data_stream.dataset\" = var.data_stream_dataset\n  latency = var.latency\n  log_group_arn = var.log_group_arn\n  log_group_name = var.log_group_name\n  log_group_name_prefix = var.log_group_name_prefix\n  log_stream_prefix = var.log_stream_prefix\n  log_streams = var.log_streams\n  number_of_workers = var.number_of_workers\n  preserve_original_event = var.preserve_original_event\n  processors = var.processors_yaml\n  region_name = var.region_name\n  scan_frequency = var.scan_frequency\n  start_position = var.start_position\n  tags = var.tags\n})}",
       "description": "${var.fleet_package_policy_description}",
       "input_type": "aws-cloudwatch",
       "namespace": "${var.fleet_data_stream_namespace}",
diff --git a/fleet_integration/aws_logs.generic.aws-s3/README.md b/fleet_integration/aws_logs.generic.aws-s3/README.md
index f26103e..6f9b7d0 100644
--- a/fleet_integration/aws_logs.generic.aws-s3/README.md
+++ b/fleet_integration/aws_logs.generic.aws-s3/README.md
@@ -41,7 +41,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws\_logs package to use. | `string` | `"1.4.0"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws\_logs package to use. | `string` | `"1.4.1"` | no |
 | <a name="input_include_s3_metadata"></a> [include\_s3\_metadata](#input\_include\_s3\_metadata) | This input can include S3 object metadata in the generated events for use in follow-on processing. You must specify the list of keys to include. By default none are included. If the key exists in the S3 response then it will be included in the event as aws.s3.metadata.<key> where the key name as been normalized to all lowercase. | `list(string)` | `null` | no |
 | <a name="input_max_bytes"></a> [max\_bytes](#input\_max\_bytes) | The maximum number of bytes that a single log message can have. All bytes after max\_bytes are discarded and not sent. This setting is especially useful for multiline log messages, which can get large. This only applies to non-JSON logs. | `string` | `"10MiB"` | no |
 | <a name="input_max_number_of_messages"></a> [max\_number\_of\_messages](#input\_max\_number\_of\_messages) | The maximum number of SQS messages that can be inflight at any time. Defaults to 5. When processing large  amount of large size S3 objects and each object has large amount of events, if this parameter sets too high, it can cause the input to process too many messages concurrently, overload the agent and cause ingest failure. We recommend to keep the default value 5 and use the [preset](https://www.elastic.co/guide/en/fleet/current/es-output-settings.html#es-output-settings-performance-tuning-settings) option to tune your Elastic Agent performance. You can optimize for throughput, scale, latency, or you can choose a balanced (the default) set of performance specifications. | `number` | `5` | no |
@@ -49,7 +49,6 @@ No resources.
 | <a name="input_number_of_workers"></a> [number\_of\_workers](#input\_number\_of\_workers) | Number of workers that will process the S3 objects listed. (Required when `bucket_arn` is set). | `number` | `1` | no |
 | <a name="input_parsers_yaml"></a> [parsers\_yaml](#input\_parsers\_yaml) | This option expects a list of parsers that the payload has to go through. For more information see [Parsers](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-aws-s3.html#input-aws-s3-parsers) | `string` | `"#- multiline:\n#    pattern: \"^<Event\"\n#    negate:  true\n#    match:   after\n"` | no |
 | <a name="input_path_style"></a> [path\_style](#input\_path\_style) | Enabling this option sets the bucket name as a path in the API call instead of a subdomain. When enabled https://<bucket-name>.s3.<region>.<provider>.com becomes https://s3.<region>.<provider>.com/<bucket-name>. This is only supported with 3rd party S3 providers.  AWS does not support path style. | `string` | `null` | no |
-| <a name="input_pipeline"></a> [pipeline](#input\_pipeline) | The Ingest Node pipeline ID to be used by the integration. | `string` | `null` | no |
 | <a name="input_preserve_original_event"></a> [preserve\_original\_event](#input\_preserve\_original\_event) | Preserves a raw copy of the original event, added to the field `event.original` | `bool` | `false` | no |
 | <a name="input_processors_yaml"></a> [processors\_yaml](#input\_processors\_yaml) | Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. | `string` | `null` | no |
 | <a name="input_provider_name"></a> [provider\_name](#input\_provider\_name) | Name of the 3rd party S3 bucket provider like backblaze or GCP. | `string` | `null` | no |
diff --git a/fleet_integration/aws_logs.generic.aws-s3/module.tf.json b/fleet_integration/aws_logs.generic.aws-s3/module.tf.json
index 6a938d0..5daf883 100644
--- a/fleet_integration/aws_logs.generic.aws-s3/module.tf.json
+++ b/fleet_integration/aws_logs.generic.aws-s3/module.tf.json
@@ -103,7 +103,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the aws_logs package to use.",
-      "default": "1.4.0"
+      "default": "1.4.1"
     },
     "include_s3_metadata": {
       "type": "list(string)",
@@ -140,11 +140,6 @@
       "description": "Enabling this option sets the bucket name as a path in the API call instead of a subdomain. When enabled https://<bucket-name>.s3.<region>.<provider>.com becomes https://s3.<region>.<provider>.com/<bucket-name>. This is only supported with 3rd party S3 providers.  AWS does not support path style.\n",
       "default": null
     },
-    "pipeline": {
-      "type": "string",
-      "description": "The Ingest Node pipeline ID to be used by the integration.\n",
-      "default": null
-    },
     "preserve_original_event": {
       "type": "bool",
       "description": "Preserves a raw copy of the original event, added to the field `event.original`",
@@ -230,7 +225,7 @@
         "aws_logs-aws-cloudwatch"
       ],
       "data_stream": "generic",
-      "data_stream_variables_json": "${jsonencode({\n  api_timeout = var.api_timeout\n  bucket_arn = var.bucket_arn\n  bucket_list_interval = var.bucket_list_interval\n  bucket_list_prefix = var.bucket_list_prefix\n  buffer_size = var.buffer_size\n  content_type = var.content_type\n  custom = var.custom_yaml\n  \"data_stream.dataset\" = var.data_stream_dataset\n  encoding = var.encoding\n  expand_event_list_from_field = var.expand_event_list_from_field\n  file_selectors = var.file_selectors_yaml\n  fips_enabled = var.fips_enabled\n  include_s3_metadata = var.include_s3_metadata\n  max_bytes = var.max_bytes\n  max_number_of_messages = var.max_number_of_messages\n  non_aws_bucket_name = var.non_aws_bucket_name\n  number_of_workers = var.number_of_workers\n  parsers = var.parsers_yaml\n  path_style = var.path_style\n  pipeline = var.pipeline\n  preserve_original_event = var.preserve_original_event\n  processors = var.processors_yaml\n  provider = var.provider_name\n  queue_url = var.queue_url\n  \"sqs.max_receive_count\" = var.sqs_max_receive_count\n  \"sqs.wait_time\" = var.sqs_wait_time\n  tags = var.tags\n  visibility_timeout = var.visibility_timeout\n})}",
+      "data_stream_variables_json": "${jsonencode({\n  api_timeout = var.api_timeout\n  bucket_arn = var.bucket_arn\n  bucket_list_interval = var.bucket_list_interval\n  bucket_list_prefix = var.bucket_list_prefix\n  buffer_size = var.buffer_size\n  content_type = var.content_type\n  custom = var.custom_yaml\n  \"data_stream.dataset\" = var.data_stream_dataset\n  encoding = var.encoding\n  expand_event_list_from_field = var.expand_event_list_from_field\n  file_selectors = var.file_selectors_yaml\n  fips_enabled = var.fips_enabled\n  include_s3_metadata = var.include_s3_metadata\n  max_bytes = var.max_bytes\n  max_number_of_messages = var.max_number_of_messages\n  non_aws_bucket_name = var.non_aws_bucket_name\n  number_of_workers = var.number_of_workers\n  parsers = var.parsers_yaml\n  path_style = var.path_style\n  preserve_original_event = var.preserve_original_event\n  processors = var.processors_yaml\n  provider = var.provider_name\n  queue_url = var.queue_url\n  \"sqs.max_receive_count\" = var.sqs_max_receive_count\n  \"sqs.wait_time\" = var.sqs_wait_time\n  tags = var.tags\n  visibility_timeout = var.visibility_timeout\n})}",
       "description": "${var.fleet_package_policy_description}",
       "input_type": "aws-s3",
       "namespace": "${var.fleet_data_stream_namespace}",
diff --git a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/README.md b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/README.md
index 2e96e0b..d239fc9 100644
--- a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/README.md
+++ b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/README.md
@@ -33,7 +33,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0-preview13"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0"` | no |
 | <a name="input_posture"></a> [posture](#input\_posture) | Chosen posture type (cspm/kspm) | `string` | n/a | yes |
 | <a name="input_role_arn"></a> [role\_arn](#input\_role\_arn) | n/a | `string` | `null` | no |
 | <a name="input_secret_access_key"></a> [secret\_access\_key](#input\_secret\_access\_key) | n/a | `string` | `null` | no |
diff --git a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/module.tf.json b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/module.tf.json
index 693289b..e3ea637 100644
--- a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/module.tf.json
+++ b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_aws/module.tf.json
@@ -61,7 +61,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the cloud_security_posture package to use.",
-      "default": "1.11.0-preview13"
+      "default": "1.11.0"
     },
     "posture": {
       "type": "string",
diff --git a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/README.md b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/README.md
index 82e9de1..4fa7aa8 100644
--- a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/README.md
+++ b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/README.md
@@ -37,7 +37,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0-preview13"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0"` | no |
 | <a name="input_posture"></a> [posture](#input\_posture) | Chosen posture type (cspm/kspm) | `string` | n/a | yes |
 
 ## Outputs
diff --git a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/module.tf.json b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/module.tf.json
index 28cc848..249b1b5 100644
--- a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/module.tf.json
+++ b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_azure/module.tf.json
@@ -78,7 +78,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the cloud_security_posture package to use.",
-      "default": "1.11.0-preview13"
+      "default": "1.11.0"
     },
     "posture": {
       "type": "string",
diff --git a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/README.md b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/README.md
index 8b58370..16cdd29 100644
--- a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/README.md
+++ b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/README.md
@@ -28,7 +28,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0-preview13"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0"` | no |
 | <a name="input_gcp_account_type"></a> [gcp\_account\_type](#input\_gcp\_account\_type) | n/a | `string` | n/a | yes |
 | <a name="input_gcp_credentials_file"></a> [gcp\_credentials\_file](#input\_gcp\_credentials\_file) | n/a | `string` | `null` | no |
 | <a name="input_gcp_credentials_json"></a> [gcp\_credentials\_json](#input\_gcp\_credentials\_json) | n/a | `string` | `null` | no |
diff --git a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/module.tf.json b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/module.tf.json
index db9cb85..43cde76 100644
--- a/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/module.tf.json
+++ b/fleet_integration/cloud_security_posture.cspm.findings.cloudbeat_cis_gcp/module.tf.json
@@ -39,7 +39,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the cloud_security_posture package to use.",
-      "default": "1.11.0-preview13"
+      "default": "1.11.0"
     },
     "gcp_account_type": {
       "type": "string",
diff --git a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/README.md b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/README.md
index 9818c55..a81c53f 100644
--- a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/README.md
+++ b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/README.md
@@ -30,7 +30,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0-preview13"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0"` | no |
 | <a name="input_posture"></a> [posture](#input\_posture) | Chosen posture type (cspm/kspm) | `string` | n/a | yes |
 | <a name="input_role_arn"></a> [role\_arn](#input\_role\_arn) | n/a | `string` | `null` | no |
 | <a name="input_secret_access_key"></a> [secret\_access\_key](#input\_secret\_access\_key) | n/a | `string` | `null` | no |
diff --git a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/module.tf.json b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/module.tf.json
index cd589d7..1a57e6b 100644
--- a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/module.tf.json
+++ b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_eks/module.tf.json
@@ -45,7 +45,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the cloud_security_posture package to use.",
-      "default": "1.11.0-preview13"
+      "default": "1.11.0"
     },
     "posture": {
       "type": "string",
diff --git a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/README.md b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/README.md
index cfa77d7..d7d7845 100644
--- a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/README.md
+++ b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/README.md
@@ -27,7 +27,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0-preview13"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0"` | no |
 | <a name="input_posture"></a> [posture](#input\_posture) | Chosen posture type (cspm/kspm) | `string` | n/a | yes |
 
 ## Outputs
diff --git a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/module.tf.json b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/module.tf.json
index 20323db..2e99793 100644
--- a/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/module.tf.json
+++ b/fleet_integration/cloud_security_posture.kspm.findings.cloudbeat_cis_k8s/module.tf.json
@@ -33,7 +33,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the cloud_security_posture package to use.",
-      "default": "1.11.0-preview13"
+      "default": "1.11.0"
     },
     "posture": {
       "type": "string",
diff --git a/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/README.md b/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/README.md
index 1e15403..728dbdf 100644
--- a/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/README.md
+++ b/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/README.md
@@ -27,7 +27,7 @@ No resources.
 | <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
 | <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
 | <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
-| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0-preview13"` | no |
+| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cloud\_security\_posture package to use. | `string` | `"1.11.0"` | no |
 | <a name="input_posture"></a> [posture](#input\_posture) | Chosen posture type (cspm/kspm) | `string` | n/a | yes |
 
 ## Outputs
diff --git a/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/module.tf.json b/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/module.tf.json
index 337e681..eca4387 100644
--- a/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/module.tf.json
+++ b/fleet_integration/cloud_security_posture.vuln_mgmt.vulnerabilities.cloudbeat_vuln_mgmt_aws/module.tf.json
@@ -34,7 +34,7 @@
     "fleet_package_version": {
       "type": "string",
       "description": "Version of the cloud_security_posture package to use.",
-      "default": "1.11.0-preview13"
+      "default": "1.11.0"
     },
     "posture": {
       "type": "string",