diff --git a/roles/deploy_container/defaults/main.yml b/roles/deploy_container/defaults/main.yml
index 169fb359..9c7644fe 100644
--- a/roles/deploy_container/defaults/main.yml
+++ b/roles/deploy_container/defaults/main.yml
@@ -89,7 +89,7 @@ deploy_container:
     acm: # see https://github.com/codeenigma/ce-provision/tree/1.x/roles/aws/aws_acm
       create_cert: false
       extra_domains: [] # list of Subject Alternative Name domains and zones
-    ssl_certificate_ARN: "" # optional SSL cert ARN if you imported one into AWS Certificate Manager
+    ssl_certificate_arn: "" # optional SSL cert ARN if you imported one into AWS Certificate Manager
     elb_security_groups: [] # default SG is used if none provided - module supports names or IDs
     elb_subnets: # must be public subnets for public facing applications
       - example-dev-a
diff --git a/roles/deploy_container/tasks/action-create.yml b/roles/deploy_container/tasks/action-create.yml
index 58ebf27a..24b7707a 100644
--- a/roles/deploy_container/tasks/action-create.yml
+++ b/roles/deploy_container/tasks/action-create.yml
@@ -194,12 +194,12 @@
 
 - name: Default to provided SSL certificate ARN.
   ansible.builtin.set_fact:
-    _ssl_certificate_ARN: "{{ deploy_container.aws_ecs.ssl_certificate_ARN }}"
+    _ssl_certificate_arn: "{{ deploy_container.aws_ecs.ssl_certificate_arn }}"
   when: deploy_container.aws_ecs.enabled
 
 - name: If provided, override SSL certificate ARN with the one received from ACM.
   ansible.builtin.set_fact:
-    _ssl_certificate_ARN: "{{ aws_acm_certificate_arn }}"
+    _ssl_certificate_arn: "{{ aws_acm_certificate_arn }}"
   when:
     - deploy_container.aws_ecs.acm.create_cert
     - deploy_container.aws_ecs.enabled
@@ -230,7 +230,7 @@
       Port: "{{ deploy_container.aws_ecs.elb_https_port }}"
       SslPolicy: "{{ deploy_container.aws_ecs.elb_ssl_policy }}"
       Certificates:
-        - CertificateArn: "{{ _ssl_certificate_ARN }}"
+        - CertificateArn: "{{ _ssl_certificate_arn }}"
       DefaultActions:
         - Type: forward
           TargetGroupName: "{{ deploy_container.aws_ecs.target_group_name | truncate(32, true, '', 0) }}"
@@ -241,14 +241,14 @@
   ansible.builtin.set_fact:
     _aws_ecs_cluster_listeners: "{{ [ _aws_ecs_cluster_listeners_http ] }}"
   when:
-    - _ssl_certificate_ARN | length < 1
+    - _ssl_certificate_arn | length < 1
     - deploy_container.aws_ecs.enabled
 
 - name: Add HTTPS Listener.
   ansible.builtin.set_fact:
     _aws_ecs_cluster_listeners: "{{ [ _aws_ecs_cluster_listeners_redirect, _aws_ecs_cluster_listeners_https ] }}"
   when:
-    - _ssl_certificate_ARN | length > 1
+    - _ssl_certificate_arn | length > 1
     - deploy_container.aws_ecs.enabled
 
 - name: Add custom Listeners.