diff --git a/aws_lambda_events/src/apigw/mod.rs b/aws_lambda_events/src/apigw/mod.rs
index 7d8c2d1..849ed61 100644
--- a/aws_lambda_events/src/apigw/mod.rs
+++ b/aws_lambda_events/src/apigw/mod.rs
@@ -478,7 +478,8 @@ pub struct ApiGatewayCustomAuthorizerRequestTypeRequestIdentity {
     #[serde(deserialize_with = "deserialize_lambda_string")]
     #[serde(default)]
     pub source_ip: Option<String>,
-    pub client_cert: ApiGatewayCustomAuthorizerRequestTypeRequestIdentityClientCert,
+    #[serde(default)]
+    pub client_cert: Option<ApiGatewayCustomAuthorizerRequestTypeRequestIdentityClientCert>,
 }
 
 /// `ApiGatewayCustomAuthorizerRequestTypeRequestIdentityClientCert` contains certificate information for the request caller if using mTLS.
@@ -518,7 +519,8 @@ pub struct ApiGatewayCustomAuthorizerRequestTypeRequestIdentityClientCertValidit
 #[derive(Debug, Clone, PartialEq, Deserialize, Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct ApiGatewayV2httpRequestContextAuthentication {
-    pub client_cert: ApiGatewayV2httpRequestContextAuthenticationClientCert,
+    #[serde(default)]
+    pub client_cert: Option<ApiGatewayV2httpRequestContextAuthenticationClientCert>,
 }
 
 /// `ApiGatewayV2httpRequestContextAuthenticationClientCert` contains client certificate information for the request caller if using mTLS.