diff --git a/kubectl.tf b/kubectl.tf
index a83f0f95e7b..2fcfe1c4d8e 100644
--- a/kubectl.tf
+++ b/kubectl.tf
@@ -2,6 +2,6 @@ resource "local_file" "kubeconfig" {
   count                = var.write_kubeconfig && var.create_eks ? 1 : 0
   content              = local.kubeconfig
   filename             = substr(var.config_output_path, -1, 1) == "/" ? "${var.config_output_path}kubeconfig_${var.cluster_name}" : var.config_output_path
-  file_permission      = "0644"
+  file_permission      = "0600"
   directory_permission = "0755"
 }