diff --git a/bootstrap/terraform/aws-bootstrap/capa-sa.tf b/bootstrap/terraform/aws-bootstrap/capa-sa.tf
index 35cf8273b..bfc919d36 100644
--- a/bootstrap/terraform/aws-bootstrap/capa-sa.tf
+++ b/bootstrap/terraform/aws-bootstrap/capa-sa.tf
@@ -101,6 +101,7 @@ data "aws_iam_policy_document" "capa_controller" {
       "elasticloadbalancing:DescribeLoadBalancers",
       "elasticloadbalancing:DescribeLoadBalancerAttributes",
       "elasticloadbalancing:DescribeTargetGroups",
+      "elasticloadbalancing:DescribeListeners",
       "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
       "elasticloadbalancing:DescribeTags",
       "elasticloadbalancing:ModifyLoadBalancerAttributes",
diff --git a/bootstrap/terraform/aws-bootstrap/output.tf b/bootstrap/terraform/aws-bootstrap/output.tf
index c040ef5d7..9c949f8d3 100644
--- a/bootstrap/terraform/aws-bootstrap/output.tf
+++ b/bootstrap/terraform/aws-bootstrap/output.tf
@@ -39,7 +39,7 @@ output "worker_role_arn" {
 }
 
 output "node_groups" {
-  value = var.create_cluster ? [for d in merge(one(module.single_az_node_groups[*].node_groups), one(module.multi_az_node_groups[*].node_groups)): d] : one(data.aws_eks_node_group.cluster[*])
+  value = var.create_cluster ? [for d in merge(one(module.single_az_node_groups[*].node_groups), one(module.multi_az_node_groups[*].node_groups)): d] : data.aws_eks_node_group.cluster[*]
 }
 
 output "vpc" {