diff --git a/terraform-state/main.tf b/terraform-state/main.tf
index 84558df..2e6d67a 100644
--- a/terraform-state/main.tf
+++ b/terraform-state/main.tf
@@ -146,8 +146,8 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "tfstate" {
       kms_master_key_id = aws_kms_key.tfstate_key.arn
       sse_algorithm     = "aws:kms"
     }
+    bucket_key_enabled = var.bucket_key_enabled
   }
-  bucket_key_enabled = var.bucket_key_enabled
 }
 
 resource "aws_s3_bucket_ownership_controls" "tfstate" {