diff --git a/infra/app/app-config/env-config/variables.tf b/infra/app/app-config/env-config/variables.tf
index 3a0784de..efe1e8cb 100644
--- a/infra/app/app-config/env-config/variables.tf
+++ b/infra/app/app-config/env-config/variables.tf
@@ -71,8 +71,8 @@ variable "service_memory" {
 variable "service_override_extra_environment_variables" {
   type        = map(string)
   description = <<EOT
-	Map that overrides the default extra environment variables defined in environment-variables.tf.
-	Map from environment variable name to environment variable value
-	EOT
+    Map that overrides the default extra environment variables defined in environment-variables.tf.
+    Map from environment variable name to environment variable value
+  EOT
   default     = {}
 }
diff --git a/infra/modules/domain/variables.tf b/infra/modules/domain/variables.tf
index acc880a5..2aa58955 100644
--- a/infra/modules/domain/variables.tf
+++ b/infra/modules/domain/variables.tf
@@ -13,7 +13,7 @@ variable "certificate_configs" {
 
     `private_key` and `certificate_body` describe the certificate information for
     imported certificates, which is required if `source` is 'imported'.
-    EOT
+  EOT
 
   validation {
     condition = alltrue([
diff --git a/infra/modules/secret/variables.tf b/infra/modules/secret/variables.tf
index 53d00e06..44d28795 100644
--- a/infra/modules/secret/variables.tf
+++ b/infra/modules/secret/variables.tf
@@ -5,7 +5,7 @@ variable "manage_method" {
     Set to 'generated' to generate a random secret.
     Set to 'manual' to reference a secret that was manually created and stored in AWS parameter store.
     Defaults to 'generated'."
-    EOT
+  EOT
   default     = "generated"
   validation {
     condition     = can(regex("^(manual|generated)$", var.manage_method))
@@ -18,5 +18,5 @@ variable "secret_store_name" {
   description = <<EOT
     If manage_method is 'generated', path to store the secret in AWS parameter store.
     If manage_method is 'manual', path to reference the secret in AWS parameter store.
-    EOT
+  EOT
 }
diff --git a/infra/modules/service/variables.tf b/infra/modules/service/variables.tf
index 4b2b14d7..2c689bd1 100644
--- a/infra/modules/service/variables.tf
+++ b/infra/modules/service/variables.tf
@@ -75,20 +75,24 @@ variable "file_upload_jobs" {
     task_command  = list(string)
   }))
   description = <<EOT
-	Configurations for jobs that trigger on a file uploadevent.
-	Each configuration is a map from the job name to an object defining the
-	event's source bucket ( the bucket the file was uploadedto), a
-	path prefix filter ( only files that match the path prefix will trigger
-		thejob), and the task command to run ( this overrides the CMD entrypoint
-	in thecontainer).
-	To reference the file path and bucket that triggered theevent, the task
-	command can optionally include the placeholder values`<object_key>`
-	and`<bucket_name>`. For example if task_commandis:
-	["python", "etl.py", "<object_key>"]
-	Then if an object was uploaded tos3://somebucket/path/to/file.txt, the
-	task will execute thecommand:
-	pythonetl.pypath/to/file.txt
-	EOT
+    Configurations for jobs that trigger on a file upload event.
+    Each configuration is a map from the job name to an object defining the
+    event's source bucket ( the bucket the file was uploaded to), a
+    path prefix filter ( only files that match the path prefix will trigger
+    the job), and the task command to run ( this overrides the CMD entrypoint
+    in the container).
+
+    To reference the file path and bucket that triggered the event, the task
+    command can optionally include the placeholder values`<object_key>`
+    and`<bucket_name>`. For example if task_command is:
+
+      ["python", "etl.py", "<object_key>"]
+
+    Then if an object was uploaded tos3://somebucket/path/to/file.txt, the
+    task will execute the command:
+
+      python etl.py path/to/file.txt
+  EOT
   default     = {}
 }