diff --git a/include/aws/io/tls_channel_handler.h b/include/aws/io/tls_channel_handler.h
index 5e27c9b28..e1847495b 100644
--- a/include/aws/io/tls_channel_handler.h
+++ b/include/aws/io/tls_channel_handler.h
@@ -568,7 +568,7 @@ AWS_IO_API int aws_tls_ctx_options_init_client_mtls_pkcs12_from_path(
     struct aws_tls_ctx_options *options,
     struct aws_allocator *allocator,
     const char *pkcs12_path,
-    struct aws_byte_cursor *pkcs_pwd);
+    const struct aws_byte_cursor *pkcs_pwd);
 
 /**
  * Initializes options for use with mutual tls in client mode.
@@ -689,7 +689,7 @@ AWS_IO_API void aws_tls_connection_options_set_callbacks(
 AWS_IO_API int aws_tls_connection_options_set_server_name(
     struct aws_tls_connection_options *conn_options,
     struct aws_allocator *allocator,
-    struct aws_byte_cursor *server_name);
+    const struct aws_byte_cursor *server_name);
 
 /**
  * Sets alpn list in the form <protocol1;protocol2;...>. A maximum of 4 protocols are supported.
diff --git a/source/tls_channel_handler.c b/source/tls_channel_handler.c
index 27218bbb6..3a9559698 100644
--- a/source/tls_channel_handler.c
+++ b/source/tls_channel_handler.c
@@ -314,7 +314,7 @@ int aws_tls_ctx_options_init_client_mtls_pkcs12_from_path(
     struct aws_tls_ctx_options *options,
     struct aws_allocator *allocator,
     const char *pkcs12_path,
-    struct aws_byte_cursor *pkcs_pwd) {
+    const struct aws_byte_cursor *pkcs_pwd) {
 
 #ifdef __APPLE__
     aws_tls_ctx_options_init_default_client(options, allocator);
@@ -615,7 +615,7 @@ void aws_tls_connection_options_set_callbacks(
 int aws_tls_connection_options_set_server_name(
     struct aws_tls_connection_options *conn_options,
     struct aws_allocator *allocator,
-    struct aws_byte_cursor *server_name) {
+    const struct aws_byte_cursor *server_name) {
 
     if (conn_options->server_name != NULL) {
         aws_string_destroy(conn_options->server_name);