diff --git a/web/main.tf b/web/main.tf
index 71507b0..899f7ec 100644
--- a/web/main.tf
+++ b/web/main.tf
@@ -67,7 +67,7 @@ resource "aws_security_group" "this_security_group" {
       from_port   = p.value["from"]
       to_port     = p.value["to"]
       protocol    = p.value["proto"]
-      cidr_blocks = length(p.value["cidr"]) == 0 ? flatten(compress(concat(local.external_ingress_networks, var.ingress_networks))) : flatten(compress(concat(p.value["cidr"], var.ingress_networks)))
+      cidr_blocks = length(p.value["cidr"]) == 0 ? flatten(compact(concat(local.external_ingress_networks, var.ingress_networks))) : flatten(compress(concat(p.value["cidr"], var.ingress_networks)))
     }
   }
 
@@ -103,7 +103,7 @@ resource "aws_security_group" "this_security_group" {
     from_port   = 0
     to_port     = 0
     protocol    = -1
-    cidr_blocks = flatten(compress(concat(local.egress_networks, var.egress_networks)))
+    cidr_blocks = flatten(compact(concat(local.egress_networks, var.egress_networks)))
   }
 
   # egress security group ids (all)