diff --git a/config/suppliers/pack-specification/notify-admail-colour-whitemail.json b/config/suppliers/pack-specification/notify-admail-colour-whitemail.json
new file mode 100644
index 000000000..dd735faec
--- /dev/null
+++ b/config/suppliers/pack-specification/notify-admail-colour-whitemail.json
@@ -0,0 +1,55 @@
+{
+  "assembly": {
+    "duplex": true,
+    "envelopeId": "economy-c5",
+    "features": [
+      "ADMAIL"
+    ],
+    "paper": {
+      "colour": "WHITE",
+      "id": "paper-std-white-80",
+      "name": "Standard White 80gsm",
+      "recycled": true,
+      "size": "A4",
+      "weightGSM": 80
+    },
+    "printColour": "COLOUR"
+  },
+  "billingId": "insert-admail-colour",
+  "constraints": {
+    "blackCoveragePercentage": {
+      "operator": "LESS_THAN",
+      "value": 20
+    },
+    "colourCoveragePercentage": {
+      "operator": "LESS_THAN",
+      "value": 10
+    },
+    "deliveryDays": {
+      "operator": "LESS_THAN",
+      "value": 2
+    },
+    "sheets": {
+      "operator": "LESS_THAN",
+      "value": 5
+    },
+    "sides": {
+      "operator": "LESS_THAN",
+      "value": 10
+    }
+  },
+  "createdAt": "2026-01-12T00:00:00.000Z",
+  "description": "Admail economy tariff with whitemail envelope and colour printing",
+  "id": "notify-admail-colour-whitemail",
+  "name": "Admail (colour whitemail)",
+  "postage": {
+    "deliveryDays": 4,
+    "id": "admail-economy",
+    "maxThicknessMm": 5,
+    "maxWeightGrams": 100,
+    "size": "STANDARD"
+  },
+  "status": "PROD",
+  "updatedAt": "2026-01-12T00:00:00.000Z",
+  "version": 1
+}
diff --git a/config/suppliers/supplier-pack/supplier1-notify-admail-colour-whitemail.json b/config/suppliers/supplier-pack/supplier1-notify-admail-colour-whitemail.json
new file mode 100644
index 000000000..859848c3a
--- /dev/null
+++ b/config/suppliers/supplier-pack/supplier1-notify-admail-colour-whitemail.json
@@ -0,0 +1,7 @@
+{
+  "approval": "APPROVED",
+  "id": "supplier1-notify-admail-colour-whitemail",
+  "packSpecificationId": "notify-admail-colour-whitemail",
+  "status": "PROD",
+  "supplierId": "supplier1"
+}
diff --git a/infrastructure/terraform/components/api/api_gateway_deployment.tf b/infrastructure/terraform/components/api/api_gateway_deployment.tf
index 458752390..bbbaf25b5 100644
--- a/infrastructure/terraform/components/api/api_gateway_deployment.tf
+++ b/infrastructure/terraform/components/api/api_gateway_deployment.tf
@@ -10,6 +10,10 @@ resource "aws_api_gateway_deployment" "main" {
     deployed_at = timestamp()
   }
 
+  depends_on = [
+    aws_api_gateway_rest_api.main
+  ]
+
   lifecycle {
     create_before_destroy = true
   }
diff --git a/infrastructure/terraform/components/api/api_gateway_rest_api.tf b/infrastructure/terraform/components/api/api_gateway_rest_api.tf
index 1b259235e..0e10d6a3a 100644
--- a/infrastructure/terraform/components/api/api_gateway_rest_api.tf
+++ b/infrastructure/terraform/components/api/api_gateway_rest_api.tf
@@ -3,8 +3,6 @@ resource "aws_api_gateway_rest_api" "main" {
   body                         = local.openapi_spec
   description                  = "Suppliers API"
   disable_execute_api_endpoint = var.disable_gateway_execute_endpoint
-
-  lifecycle {
-    replace_triggered_by = [terraform_data.rest_api_security_policy]
-  }
+  security_policy              = "SecurityPolicy_TLS12_PFS_2025_EDGE"
+  endpoint_access_mode         = "STRICT"
 }
diff --git a/infrastructure/terraform/components/api/api_gateway_rest_api_tls.tf b/infrastructure/terraform/components/api/api_gateway_rest_api_tls.tf
deleted file mode 100644
index efef825f1..000000000
--- a/infrastructure/terraform/components/api/api_gateway_rest_api_tls.tf
+++ /dev/null
@@ -1,11 +0,0 @@
-locals {
-  rest_api_security_policy      = "SecurityPolicy_TLS12_PFS_2025_EDGE"
-  rest_api_endpoint_access_mode = "STRICT"
-}
-
-resource "terraform_data" "rest_api_security_policy" {
-  input = {
-    security_policy      = local.rest_api_security_policy
-    endpoint_access_mode = local.rest_api_endpoint_access_mode
-  }
-}
diff --git a/infrastructure/terraform/components/api/locals.tf b/infrastructure/terraform/components/api/locals.tf
index 517590fa8..da1e61630 100644
--- a/infrastructure/terraform/components/api/locals.tf
+++ b/infrastructure/terraform/components/api/locals.tf
@@ -7,8 +7,6 @@ locals {
   openapi_spec = templatefile("${path.module}/resources/spec.tmpl.json", {
     APIG_EXECUTION_ROLE_ARN    = aws_iam_role.api_gateway_execution_role.arn
     AWS_REGION                 = var.region
-    SECURITY_POLICY            = local.rest_api_security_policy
-    ENDPOINT_ACCESS_MODE       = local.rest_api_endpoint_access_mode
     AUTHORIZER_LAMBDA_ARN      = module.authorizer_lambda.function_arn
     GET_LETTER_LAMBDA_ARN      = module.get_letter.function_arn
     GET_LETTERS_LAMBDA_ARN     = module.get_letters.function_arn
diff --git a/infrastructure/terraform/components/api/resources/spec.tmpl.json b/infrastructure/terraform/components/api/resources/spec.tmpl.json
index 8d6430127..51ad83dfb 100644
--- a/infrastructure/terraform/components/api/resources/spec.tmpl.json
+++ b/infrastructure/terraform/components/api/resources/spec.tmpl.json
@@ -357,7 +357,5 @@
         }
       ]
     }
-  },
-  "x-amazon-apigateway-endpoint-access-mode": "${ENDPOINT_ACCESS_MODE}",
-  "x-amazon-apigateway-security-policy": "${SECURITY_POLICY}"
+  }
 }