diff --git a/files/tenant-samples/bridge/terraform/cognito-client.tf b/files/tenant-samples/bridge/terraform/cognito-client.tf
index 78487868..9e7ba612 100644
--- a/files/tenant-samples/bridge/terraform/cognito-client.tf
+++ b/files/tenant-samples/bridge/terraform/cognito-client.tf
@@ -35,14 +35,14 @@ module "cognito_ssm_parameters" {
   ssm_parameters = [
     {
       name        = "/${var.namespace}/${var.environment}/${var.tenant_tier}/cognito_id"
-      value       = resource.aws_cognito_user_pool_client.app_client.id
+      value       = resource.aws_cognito_user_pool_client.app_client.id[0]
       type        = "SecureString"
       overwrite   = "true"
       description = "Tenant Cognito Domain ID"
     },
     {
       name        = "/${var.namespace}/${var.environment}/${var.tenant_tier}/cognito_secret"
-      value       = resource.aws_cognito_user_pool_client.app_client.client_secret
+      value       = resource.aws_cognito_user_pool_client.app_client.client_secret[0]
       type        = "SecureString"
       overwrite   = "true"
       description = "Tenant Cognito Domain Secret"
diff --git a/files/tenant-samples/pooled/terraform/cognito-client.tf b/files/tenant-samples/pooled/terraform/cognito-client.tf
index a1fc8cb6..5aaf939d 100644
--- a/files/tenant-samples/pooled/terraform/cognito-client.tf
+++ b/files/tenant-samples/pooled/terraform/cognito-client.tf
@@ -60,14 +60,14 @@ module "cognito_ssm_parameters" {
   ssm_parameters = [
     {
       name        = "/${var.namespace}/${var.environment}/${var.tenant_tier}/cognito_id"
-      value       = resource.aws_cognito_user_pool_client.app_client.id
+      value       = resource.aws_cognito_user_pool_client.app_client.id[0]
       type        = "SecureString"
       overwrite   = "true"
       description = "Tenant Cognito Domain ID"
     },
     {
       name        = "/${var.namespace}/${var.environment}/${var.tenant_tier}/cognito_secret"
-      value       = resource.aws_cognito_user_pool_client.app_client.client_secret
+      value       = resource.aws_cognito_user_pool_client.app_client.client_secret[0]
       type        = "SecureString"
       overwrite   = "true"
       description = "Tenant Cognito Domain Secret"