diff --git a/examples/named_cluster/kms.tf b/examples/named_cluster/kms.tf
index 787b6439..d0cee82e 100644
--- a/examples/named_cluster/kms.tf
+++ b/examples/named_cluster/kms.tf
@@ -1,9 +1,4 @@
 resource "azurerm_key_vault_key" "kms" {
-  name         = "etcd-encryption"
-  key_vault_id = azurerm_key_vault.des_vault.id
-  key_type     = "RSA"
-  key_size     = 2048
-
   key_opts = [
     "decrypt",
     "encrypt",
@@ -12,6 +7,10 @@ resource "azurerm_key_vault_key" "kms" {
     "verify",
     "wrapKey",
   ]
+  key_type     = "RSA"
+  key_vault_id = azurerm_key_vault.des_vault.id
+  name         = "etcd-encryption"
+  key_size     = 2048
 
   depends_on = [
     azurerm_key_vault_access_policy.current_user