diff --git a/common/ports.tf b/common/ports.tf
index 8c84a43..18d9795 100644
--- a/common/ports.tf
+++ b/common/ports.tf
@@ -24,7 +24,7 @@ locals {
   p_self_fields = ["from", "to", "proto", "description"]
   sp_list1      = length(var.ingress_self_port_list) > 0 ? [for p in var.ingress_self_port_list : zipmap(local.p_self_fields, p)] : []
   sp_list2      = length(var.ingress_self_port_map) > 0 ? var.ingress_self_port_map : []
-  sp_list3      = local._defaults["self_port_list"]
+  sp_list3      = length(var.ingress_self_port_list) == 0 && length(var.ingress_self_port_map) == 0 ? local._defaults["self_port_list"] : []
 
   self_port_map = {
     "ingress_ports" = local.sp_list1
diff --git a/sas/ports.tf b/sas/ports.tf
index 6c27e46..a554cbf 100644
--- a/sas/ports.tf
+++ b/sas/ports.tf
@@ -56,7 +56,7 @@ locals {
   p_self_fields = ["from", "to", "proto", "description"]
   sp_list1      = length(var.ingress_self_port_list) > 0 ? [for p in var.ingress_self_port_list : zipmap(local.p_self_fields, p)] : []
   sp_list2      = length(var.ingress_self_port_map) > 0 ? var.ingress_self_port_map : []
-  sp_list3      = local._defaults["self_port_list"]
+  sp_list3      = length(var.ingress_self_port_list) == 0 && length(var.ingress_self_port_map) == 0 ? local._defaults["self_port_list"] : []
 
   self_port_map = {
     "ingress_ports" = local.sp_list1