diff --git a/hashicorp-vault/iac/main.tf b/hashicorp-vault/iac/main.tf
index 3d36b03..f90cf14 100644
--- a/hashicorp-vault/iac/main.tf
+++ b/hashicorp-vault/iac/main.tf
@@ -79,7 +79,7 @@ module "app_policies" {
   for_each                   = { for app in var.applications : app.name => app }
   name                       = each.value.name
   envs                       = each.value.envs
-  ops_policies               = each.value.policies
+  ops_policies               = each.value.ops_policies
   service_account_names      = each.value.service_account_names
   service_account_namespaces = each.value.service_account_namespaces
   gitea_app_id               = var.gitea_app_id
diff --git a/hashicorp-vault/iac/variables.tf b/hashicorp-vault/iac/variables.tf
index 5c89240..aa01227 100644
--- a/hashicorp-vault/iac/variables.tf
+++ b/hashicorp-vault/iac/variables.tf
@@ -12,7 +12,7 @@ variable "POSTGRES_CREDENTIALS_EDITOR_PASSWORD" {
 variable "applications" {
   type = set(object({
     name                       = string
-    policies                   = optional(list(string), [])
+    ops_policies               = optional(list(string), [])
     service_account_names      = optional(list(string), [])
     service_account_namespaces = optional(list(string), [])
     # Multi-env extension: list of envs this app deploys to. Defaults to ["prod"] for