diff --git a/nacls/README.md b/nacls/README.md
index c35fb52..245d325 100644
--- a/nacls/README.md
+++ b/nacls/README.md
@@ -67,6 +67,7 @@ No modules.
 |------|-------------|------|---------|:--------:|
 | <a name="input_account_alias"></a> [account\_alias](#input\_account\_alias) | AWS Account Alias (default: will pull from current account\_alias) | `string` | `""` | no |
 | <a name="input_account_id"></a> [account\_id](#input\_account\_id) | AWS Account ID (default: will pull from current user) | `string` | `""` | no |
+| <a name="input_attachment_subnet_ids"></a> [attachment\_subnet\_ids](#input\_attachment\_subnet\_ids) | List of attachment subnet IDs (not objects) | `list(string)` | `[]` | no |
 | <a name="input_override_prefixes"></a> [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component. This should be used primarily for common infrastructure things | `map(string)` | `{}` | no |
 | <a name="input_private_subnet_ids"></a> [private\_subnet\_ids](#input\_private\_subnet\_ids) | List of private subnet IDs (not objects) | `list(string)` | `[]` | no |
 | <a name="input_private_subnets_ids"></a> [private\_subnets\_ids](#input\_private\_subnets\_ids) | List of private subnet objects including: subnet, label, availability\_zone, id | <pre>list(object({<br>    subnet            = string<br>    label             = string<br>    availability_zone = string<br>    id                = string<br>  }))</pre> | `[]` | no |
diff --git a/nacls/variables.tf b/nacls/variables.tf
index 15ab89b..601fc2f 100644
--- a/nacls/variables.tf
+++ b/nacls/variables.tf
@@ -9,3 +9,9 @@ variable "private_subnet_ids" {
   type        = list(string)
   default     = []
 }
+
+variable "attachment_subnet_ids" {
+  description = "List of attachment subnet IDs (not objects)"
+  type        = list(string)
+  default     = []
+}