diff --git a/infrastructure/integration.tfvars b/infrastructure/integration.tfvars
index 3d6ae340..1b619fe4 100644
--- a/infrastructure/integration.tfvars
+++ b/infrastructure/integration.tfvars
@@ -105,4 +105,5 @@ ssm_redshift_host                    = "/crossfeed/integration/REDSHIFT_HOST"
 ssm_redshift_database                = "/crossfeed/integration/REDSHIFT_DATABASE"
 ssm_redshift_user                    = "/crossfeed/integration/REDSHIFT_USER"
 ssm_redshift_password                = "/crossfeed/integration/REDSHIFT_PASSWORD"
-create_elasticache_cluster           = true
\ No newline at end of file
+create_elasticache_cluster           = true
+matomo_availability_zone             = "us-east-1a"
\ No newline at end of file
diff --git a/infrastructure/worker.tf b/infrastructure/worker.tf
index 3f1d299f..cdf418cd 100644
--- a/infrastructure/worker.tf
+++ b/infrastructure/worker.tf
@@ -112,7 +112,7 @@ resource "aws_iam_role_policy" "worker_task_execution_role_policy" {
       "Action": [
         "kms:Decrypt"
       ],
-      "Resource": ${data.aws_ssm_parameter.worker_kms_keys.value}
+      "Resource": "${data.aws_ssm_parameter.worker_kms_keys.value}"
     }
   ]
 }