diff --git a/security_controls_scp/modules/ai/ai_services_opt_out.tf b/security_controls_scp/modules/ai/ai_services_opt_out.tf
index b030fc1..8db2478 100644
--- a/security_controls_scp/modules/ai/ai_services_opt_out.tf
+++ b/security_controls_scp/modules/ai/ai_services_opt_out.tf
@@ -7,6 +7,7 @@ resource "aws_organizations_policy" "ai_services_opt_out" {
   content     = <<CONTENT
   {
     "services": {
+        "@@operators_allowed_for_child_policies": ["@@none"],
         "default": {
             "@@operators_allowed_for_child_policies": ["@@none"],
             "opt_out_policy": {