diff --git a/access_rule_groups.tf b/access_rule_groups.tf
index b90b080..f05a851 100644
--- a/access_rule_groups.tf
+++ b/access_rule_groups.tf
@@ -36,7 +36,7 @@
 resource "cloudflare_zero_trust_access_group" "default_groups" {
   account_id = local.cloudflare_account_id
   name       = "default group"
-  zone_id    = var.cloudflare_zone_id
+  zone_id    = local.cloudflare_zone_id
   is_default = true
 
   include = [