diff --git a/modules/k8s-cluster/security.tf b/modules/k8s-cluster/security.tf
index ddf9f7fd8..f683daff2 100644
--- a/modules/k8s-cluster/security.tf
+++ b/modules/k8s-cluster/security.tf
@@ -8,10 +8,10 @@ resource "aws_security_group" "controller" {
 
   vpc_id = "${var.vpc_id}"
 
-  tags = {
-    "Name"                                      = "${var.cluster_name}-controller"
-    "kubernetes.io/cluster/${var.cluster_name}" = "owned"
-  }
+  tags = "${map(
+    "Name", "${var.cluster_name}-controller",
+    "kubernetes.io/cluster/${var.cluster_name}", "owned",
+  )}"
 }
 
 resource "aws_security_group_rule" "controller-apiserver-cidrs" {
@@ -82,10 +82,10 @@ resource "aws_security_group" "node" {
 
   vpc_id = "${var.vpc_id}"
 
-  tags = {
-    "Name"                                      = "${var.cluster_name}-node"
-    "kubernetes.io/cluster/${var.cluster_name}" = "owned"
-  }
+  tags = "${map(
+    "Name", "${var.cluster_name}-node",
+    "kubernetes.io/cluster/${var.cluster_name}", "owned",
+  )}"
 }
 
 resource "aws_security_group_rule" "node-egress" {
@@ -126,10 +126,9 @@ resource "aws_security_group" "worker" {
 
   vpc_id = "${var.vpc_id}"
 
-  tags = {
-    "Name"                                      = "${var.cluster_name}-worker"
-    "kubernetes.io/cluster/${var.cluster_name}" = "owned"
-  }
+  tags = "${map(
+    "Name", "${var.cluster_name}-worker",
+  )}"
 }
 
 resource "aws_security_group_rule" "workers-from-public" {
diff --git a/pipelines/tasks/generate-trusted-contributors.yaml b/pipelines/tasks/generate-trusted-contributors.yaml
index e1b2391f1..b714bd571 100644
--- a/pipelines/tasks/generate-trusted-contributors.yaml
+++ b/pipelines/tasks/generate-trusted-contributors.yaml
@@ -1,5 +1,4 @@
 platform: linux
-image_resource:
 image_resource:
   type: docker-image
   source: