diff --git a/kms_policy.json.tpl b/kms_policy.json.tpl
index 16ca140..f956b2f 100644
--- a/kms_policy.json.tpl
+++ b/kms_policy.json.tpl
@@ -5,7 +5,7 @@
     {
       "Sid": "Enable IAM User Permissions",
       "Effect": "Allow",
-      "Principal": {"AWS": "arn:aws:iam::${account_id}:root"},{"Service": "logs.us-east-1.amazonaws.com"},
+      "Principal": {"AWS": "arn:aws:iam::${account_id}:root","Service": "logs.us-east-1.amazonaws.com"},
       "Action": "kms:*",
       "Resource": "*"
     }