diff --git a/README.md b/README.md
index c0b1cd1..f1ec66b 100644
--- a/README.md
+++ b/README.md
@@ -153,7 +153,7 @@ No modules.
 | <a name="input_ldap_password"></a> [ldap\_password](#input\_ldap\_password) | LDAP password for ldap\_user for writing data into eDirectory or Active Directory | `string` | `""` | no |
 | <a name="input_ldap_port"></a> [ldap\_port](#input\_ldap\_port) | LDAP port (default is 389 but also using STARTTLS) | `number` | `389` | no |
 | <a name="input_ldap_user"></a> [ldap\_user](#input\_ldap\_user) | LDAP user for writing data into eDirectory or Active Directory | `string` | `""` | no |
-| <a name="input_max_session_duration"></a> [max\_session\_duration](#input\_max\_session\_duration) | n/a | `number` | `3600` | no |
+| <a name="input_max_session_duration"></a> [max\_session\_duration](#input\_max\_session\_duration) | Override the maximum session duration from the default (3600) | `number` | `3600` | no |
 | <a name="input_override_prefixes"></a> [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component (role, policy). This should be used primarily for common infrastructure things | `map(string)` | `{}` | no |
 | <a name="input_role_description"></a> [role\_description](#input\_role\_description) | Role/application description | `string` | `""` | no |
 | <a name="input_role_name"></a> [role\_name](#input\_role\_name) | Role/application name without prefix | `string` | n/a | yes |
diff --git a/variables.tf b/variables.tf
index fcc3376..8baae5f 100644
--- a/variables.tf
+++ b/variables.tf
@@ -52,9 +52,9 @@ variable "instance_profile_path" {
 }
 
 variable "max_session_duration" {
-  descriptio = "Override the maximum session duration from the default (3600)"
-  type       = number
-  default    = 3600
+  description = "Override the maximum session duration from the default (3600)"
+  type        = number
+  default     = 3600
 }
 
 variable "component_tags" {