diff --git a/access_keys.tf b/access_keys.tf
index 9933b99..7b0ae06 100644
--- a/access_keys.tf
+++ b/access_keys.tf
@@ -59,17 +59,21 @@ resource "null_resource" "rotate_keys_tfvars" {
 }
 
 resource "local_file" "rotate_keys_tfvars" {
-  count    = var.create_access_keys ? 1 : 0
-  content  = local.rotate_keys_tfvars
-  filename = var.create_access_keys ? format("%v/%v/variables.auto.tfvars", path.root, join("", null_resource.rotate_keys_tfvars.*.triggers.access_keys_directory)) : "empty.txt"
+  count                 = var.create_access_keys ? 1 : 0
+  content               = local.rotate_keys_tfvars
+  filename              = var.create_access_keys ? format("%v/%v/variables.auto.tfvars", path.root, join("", null_resource.rotate_keys_tfvars.*.triggers.access_keys_directory)) : "empty.txt"
+  directory_permissions = "0755"
+  file_permissions      = "0644"
 
   #  depends_on = [null_resource.rotate_keys_tfvars]
 }
 
 resource "local_sensitive_file" "access_key_file" {
-  count    = var.create_access_keys ? 1 : 0
-  content  = local.access_key_file
-  filename = var.create_access_keys ? format("%v/%v/access_key.yml", path.root, join("", null_resource.rotate_keys_tfvars.*.triggers.access_keys_directory)) : "empty.txt"
+  count                 = var.create_access_keys ? 1 : 0
+  content               = local.access_key_file
+  filename              = var.create_access_keys ? format("%v/%v/access_key.yml", path.root, join("", null_resource.rotate_keys_tfvars.*.triggers.access_keys_directory)) : "empty.txt"
+  directory_permissions = "0755"
+  file_permissions      = "0644"
 
   #  depends_on = [null_resource.rotate_keys_tfvars]
 }