diff --git a/modules/azure/aks/nsg.tf b/modules/azure/aks/nsg.tf
index d3b14faba..ecf5a99bd 100644
--- a/modules/azure/aks/nsg.tf
+++ b/modules/azure/aks/nsg.tf
@@ -15,7 +15,7 @@ resource "azurerm_network_security_rule" "allow_internet_azure_lb" {
   source_port_range           = "*"
   destination_port_range      = "80,443"
   source_address_prefix       = "Internet"
-  destination_address_prefix  = data.azurerm_resources.public_ips
+  destination_address_prefixes  = tolist(tostring(data.azurerm_resources.public_ips))
   resource_group_name         = data.azurerm_resource_group.this.name
   network_security_group_name = "nsg-${var.environment}-${var.location_short}-${var.core_name}-${var.name}${var.aks_name_suffix}"
 }