diff --git a/generate_terraform_self.rb b/generate_terraform_self.rb
index a17ae163c..406f64918 100755
--- a/generate_terraform_self.rb
+++ b/generate_terraform_self.rb
@@ -9,7 +9,12 @@
     FileUtils.mkdir '/etc/puppetlabs/data/nodes'
 rescue Errno::EEXIST
 end
+FileUtils.chown 'root', 'puppet', '/etc/puppetlabs/data/nodes'
+FileUtils.chmod 0644, '/etc/puppetlabs/data/nodes'
 instances.each do | name, values |
+    filename = '/etc/puppetlabs/data/nodes/%s.yaml' % name
     self_hash = { 'terraform' => { 'instances' => { 'self' => values } } }
-    File.write('/etc/puppetlabs/data/nodes/%s.yaml' % name, self_hash.to_yaml)
+    File.write(filename, self_hash.to_yaml)
+    FileUtils.chown 'root', 'puppet', filename
+    FileUtils.chmod 0640, filename
 end
\ No newline at end of file