diff --git a/examples/complete/main.tf b/examples/complete/main.tf
index cbe8bd5..af37c00 100644
--- a/examples/complete/main.tf
+++ b/examples/complete/main.tf
@@ -144,6 +144,14 @@ module "ecs" {
 
             port_name      = local.container_name
             discovery_name = local.container_name
+            # Example TLS configuration
+            # tls = {
+            #   issuer_cert_authority = {
+            #     aws_pca_authority_arn = aws_acmpca_certificate_authority.this.arn
+            #   }
+            #   role_arn = module.tls_role.iam_role_arn
+            #   kms_key = module.tls_role.kms_key_arn
+            # }
           }
         ]
       }
diff --git a/modules/service/main.tf b/modules/service/main.tf
index a920c9a..d3c0d8a 100644
--- a/modules/service/main.tf
+++ b/modules/service/main.tf
@@ -251,7 +251,7 @@ resource "aws_ecs_service" "this" {
 
             content {
               dynamic "issuer_cert_authority" {
-                for_each = tls.value.issuer_cert_authority
+                for_each = [tls.value.issuer_cert_authority]
 
                 content {
                   aws_pca_authority_arn = issuer_cert_authority.value.aws_pca_authority_arn