diff --git a/aws/s3-private/replication.tf b/aws/s3-private/replication.tf
index dfb0610c..9b953d79 100644
--- a/aws/s3-private/replication.tf
+++ b/aws/s3-private/replication.tf
@@ -73,7 +73,7 @@ locals {
       ]
     },
   ]
-  encrypt-policy = compact([
+  encrypt-policy = [
     for replica in var.s3_replicas : {
       "Effect" : "Allow",
       "Action" : [
@@ -87,7 +87,7 @@ locals {
       },
       "Resource" : [replica.kms_arn]
     } if replica.kms_arn != null
-  ])
+  ]
 }
 
 resource "aws_iam_policy" "replication" {