diff --git a/access_keys.tf b/access_keys.tf
index 617848e..3c2d177 100644
--- a/access_keys.tf
+++ b/access_keys.tf
@@ -80,6 +80,7 @@ resource "local_sensitive_file" "access_key_file" {
 }
 
 resource "null_resource" "access_key_file_decrypt_key" {
+  count = var.create_access_keys ? 1 : 0
   triggers = {
     access_keys_directory = var.create_access_keys ? format("%v/%v", path.root, join("", null_resource.rotate_keys_tfvars.*.triggers.access_keys_directory)) : "."
     access_key_file       = var.create_access_keys ? join("", local_sensitive_file.access_key_file.*.filename) : "empty.txt"