diff --git a/examples/full-cluster-tf-upgrade/1.28/securitygroup.ports.tf b/examples/full-cluster-tf-upgrade/1.28/securitygroup.ports.tf
index b6aa621..addc0fd 100644
--- a/examples/full-cluster-tf-upgrade/1.28/securitygroup.ports.tf
+++ b/examples/full-cluster-tf-upgrade/1.28/securitygroup.ports.tf
@@ -3,7 +3,7 @@
 # Ports needed to correctly install Istio for the error message: transport: Error while dialing dial tcp xx.xx.xx.xx15012: i/o timeout
 # other ports here as needed
 locals {
-  sg_additional_port = [
+  sg_additional_ports = [
     {
       component   = "istio"
       description = "Envoy admin port / outbound"
@@ -90,7 +90,7 @@ locals {
     }
   }
 
-  sg_additonal_egress_rules = {
+  sg_additional_egress_rules = {
     for ekey, evalue in local.sg_additional_ports :
     "${ekey}_egress" => {
       description = evalue.description
@@ -116,7 +116,7 @@ resource "aws_vpc_security_group_ingress_rule" "additional" {
 }
 
 resource "aws_vpc_security_group_egress_rule" "additional" {
-  for_each          = { for k, v in local.sg_additiona_egress_rules : v.from_port => v }
+  for_each          = { for k, v in local.sg_additional_egress_rules : v.from_port => v }
   security_group_id = aws_security_group.additional_eks_cluster_sg.id
 
   description                  = each.value.description