diff --git a/NOTICE b/NOTICE
index 66ce1e2e829c28cf6d0811da92ea3a39e02d03dd..93d839660a92e3db695259123f9d2bda1df10571 100644
--- a/NOTICE
+++ b/NOTICE
@@ -8,7 +8,7 @@ This software includes the following software and licenses:
 ========================================================================
 The following software have components provided under the terms of this license:
 
-- typing-extensions (from https://pypi.org/project/typing-extensions/4.4.0/, https://pypi.org/project/typing-extensions/4.8.0/)
+- typing-extensions (from https://pypi.org/project/typing-extensions/4.4.0/, https://pypi.org/project/typing-extensions/4.9.0/)
 
 ========================================================================
 Apache-2.0
@@ -154,4 +154,4 @@ The following software have components provided under the terms of this license:
 - exceptiongroup (from https://pypi.org/project/exceptiongroup/1.0.1/, https://pypi.org/project/exceptiongroup/1.2.0/)
 - portalocker (from https://github.com/WoLpH/portalocker)
 - python-dateutil (from https://github.com/dateutil/dateutil)
-- typing-extensions (from https://pypi.org/project/typing-extensions/4.4.0/, https://pypi.org/project/typing-extensions/4.8.0/)
+- typing-extensions (from https://pypi.org/project/typing-extensions/4.4.0/, https://pypi.org/project/typing-extensions/4.9.0/)
diff --git a/build/aws/build-aws/Dockerfile b/build/aws/build-aws/Dockerfile
index 62fc0ca3f768f8d23635ab5556ca76ee2161bf4d..0c7ff7ed016005d3c74f97548f91d5a49bd3d612 100644
--- a/build/aws/build-aws/Dockerfile
+++ b/build/aws/build-aws/Dockerfile
@@ -13,24 +13,28 @@
 # limitations under the License.
 
 # This Dockerfile assumes you used "make build" to convert the AdminUI to static files in frontend/adminui/dist/policyservice
-FROM public.ecr.aws/docker/library/alpine:latest
+FROM public.ecr.aws/docker/library/alpine:3.18.4
 
 # set environment variables
 # PYTHONDONTWRITEBYTECODE - Prevents Python from writing pyc files to disc (equivalent to python -B option)
 ENV PYTHONDONTWRITEBYTECODE 1
 # PYTHONUNBUFFERED - Prevents Python from buffering stdout and stderr (equivalent to python -u option)
 ENV PYTHONUNBUFFERED 1
+
+ENV PATH="/opt/.python/bin:${PATH}"
+
 EXPOSE 8080/tcp
 
-RUN apk update && \
-    apk upgrade
+RUN apk update
+RUN apk upgrade
 
 RUN apk add gcc musl-dev linux-headers python3-dev
 RUN apk add py3-pip
 
 WORKDIR /opt
 COPY ./app /opt
-RUN pip install --no-cache-dir --upgrade -r /opt/requirements.txt
+RUN python3 -m venv "/opt/.python/" --system-site-packages
+RUN /opt/.python/bin/pip install --no-cache-dir --upgrade -r /opt/requirements.txt
 
 RUN apk del gcc musl-dev linux-headers python3-dev
 RUN apk --purge del apk-tools