diff --git a/modules/secret/secret.tf b/modules/secret/secret.tf
index 0776aa54..ce51d66b 100644
--- a/modules/secret/secret.tf
+++ b/modules/secret/secret.tf
@@ -1,6 +1,7 @@
 resource "aws_secretsmanager_secret" "secret" {
   name                    = var.name
   recovery_window_in_days = var.recovery_window_in_days
+  kms_key_id              = var.kms_key_id
 }
 
 resource "aws_secretsmanager_secret_version" "value" {
@@ -8,5 +9,4 @@ resource "aws_secretsmanager_secret_version" "value" {
 
   secret_id     = aws_secretsmanager_secret.secret.id
   secret_string = jsonencode(var.value)
-  kms_key_id    = var.kms_key_id
 }