diff --git a/main.tf b/main.tf
index 03d94857e3..a000708468 100644
--- a/main.tf
+++ b/main.tf
@@ -1,10 +1,10 @@
 locals {
-  cluster_encryption_config = length(var.cluster_encryption_config) > 0 ? [
+  cluster_encryption_config = length(var.cluster_encryption_config) > 0 ? var.cluster_encryption_config : [
     {
       provider_key_arn = try(module.kms[0].key_arn, var.cluster_kms_key_arn)
       resources        = ["secrets"]
     }
-  ] : var.cluster_encryption_config
+  ]
 }
 
 module "kms" {