From c75fe9f9f0f7615b70390f5730831850064c59c2 Mon Sep 17 00:00:00 2001
From: Stephan <99481666+stephan242@users.noreply.github.com>
Date: Wed, 14 Aug 2024 15:39:35 +0100
Subject: [PATCH] Make sure replica_kms_key_id is truly empty

---
 main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/main.tf b/main.tf
index ffefecbe..72e8b7d7 100644
--- a/main.tf
+++ b/main.tf
@@ -234,7 +234,7 @@ resource "aws_s3_bucket_replication_configuration" "default" {
         dynamic "encryption_configuration" {
           for_each = try(
             [rule.value.destination.encryption_configuration.replica_kms_key_id],
-            [rule.value.destination.replica_kms_key_id],
+            [compact(rule.value.destination.replica_kms_key_id)],
             []
           )