diff --git a/terraform/oidc-bitbucket.tf b/terraform/oidc-bitbucket.tf
index 039b968..05e5da7 100644
--- a/terraform/oidc-bitbucket.tf
+++ b/terraform/oidc-bitbucket.tf
@@ -79,7 +79,7 @@ resource "aws_iam_role" "bitbucket_ci_cd" {
         }
         Action = "sts:AssumeRoleWithWebIdentity"
         Condition = {
-          ForAnyValue:StringEquals = {
+          "ForAnyValue:StringEquals" = {
             "${trimprefix(local.bitbucket_oidc_url, "https://")}:aud" = [
               "sts.amazonaws.com",
               "ari:cloud:bitbucket::workspace/${local.bitbucket_workspace_uuid}"