diff --git a/access_keys.tf b/access_keys.tf
index ef6bf27..f3e3b16 100644
--- a/access_keys.tf
+++ b/access_keys.tf
@@ -64,8 +64,6 @@ resource "local_file" "rotate_keys_tfvars" {
   filename             = var.create_access_keys ? format("%v/%v/variables.auto.tfvars", path.root, join("", null_resource.rotate_keys_tfvars.*.triggers.access_keys_directory)) : "empty.txt"
   directory_permission = "0755"
   file_permission      = "0644"
-
-  #  depends_on = [null_resource.rotate_keys_tfvars]
 }
 
 resource "local_sensitive_file" "access_key_file" {
@@ -75,7 +73,10 @@ resource "local_sensitive_file" "access_key_file" {
   directory_permission = "0755"
   file_permission      = "0644"
 
-  #  depends_on = [null_resource.rotate_keys_tfvars]
+  # need this because we modify the content in the null_resource below
+  lifecycle {
+    ignore_changes = [content]
+  }
 }
 
 resource "null_resource" "access_key_file_decrypt_key" {
@@ -87,5 +88,4 @@ resource "null_resource" "access_key_file_decrypt_key" {
   provisioner "local-exec" {
     command = "${path.module}/bin/decrypt-secret-key.sh ${self.triggers.access_key_file}"
   }
-  #  depends_on = [null_resource.rotate_keys_tfvars]
 }