diff --git a/ecs.tf b/ecs.tf
index 6e6a773..2c4a123 100644
--- a/ecs.tf
+++ b/ecs.tf
@@ -47,14 +47,11 @@ resource "aws_ecs_task_definition" "main_task" {
         transit_encryption_port = volume.value.transit_encryption_port
 
         dynamic "authorization_config" {
-          for_each = [for a in volume.value.authorization_config : {
-            access_point_id = a.access_point_id
-            iam             = coalesce(a.iam, "DISABLED")
-          }]
+          for_each = volume.value.authorization_config
 
           content {
-            access_point_id = authorization_config.value.access_point_id
-            iam             = authorization_config.value.iam
+            access_point_id = authorization_config.value["access_point_id"]
+            iam             = authorization_config.value["iam"]
           }
         }
       }