diff --git a/permissionset/main.tf b/permissionset/main.tf
index 202b5e5..7c161ec 100644
--- a/permissionset/main.tf
+++ b/permissionset/main.tf
@@ -5,10 +5,9 @@ locals {
     multiple = "p-sso-%v-p%v"
   }
   auto_policy_name_single   = var.auto_policy_count == 0 ? [format(local.auto_policy_name_format["single"], var.name)] : []
-  auto_policy_name_multiple = (var.auto_policy_count > 0 && var.auto_policy_count <= 20) ? [for i in range(1, var.auto_policy_count + 1) : format(local.auto_policy_name_format["multiple"], var.name, i)] : []
+  auto_policy_name_multiple = can(var.auto_policy_count > 0 && var.auto_policy_count <= 20) ? [for i in range(1, var.auto_policy_count + 1) : format(local.auto_policy_name_format["multiple"], var.name, i)] : []
   auto_policy_names         = compact(concat(local.auto_policy_name_single, local.auto_policy_name_multiple))
-
-  total_policies = length(compact(concat(keys(var.customer_managed_policy_names), local.auto_policy_names)))
+  total_policies            = length(compact(concat(keys(var.customer_managed_policy_names), local.auto_policy_names)))
 }
 
 resource "aws_ssoadmin_permission_set" "pset" {