diff --git a/generate_terraform_self.rb b/generate_terraform_self.rb
index 406f64918..3c367fef8 100755
--- a/generate_terraform_self.rb
+++ b/generate_terraform_self.rb
@@ -10,7 +10,7 @@
 rescue Errno::EEXIST
 end
 FileUtils.chown 'root', 'puppet', '/etc/puppetlabs/data/nodes'
-FileUtils.chmod 0644, '/etc/puppetlabs/data/nodes'
+FileUtils.chmod 0640, '/etc/puppetlabs/data/nodes'
 instances.each do | name, values |
     filename = '/etc/puppetlabs/data/nodes/%s.yaml' % name
     self_hash = { 'terraform' => { 'instances' => { 'self' => values } } }