diff --git a/modules/fabric-net-firewall/README.md b/modules/fabric-net-firewall/README.md
index ec6d289d..408f4629 100644
--- a/modules/fabric-net-firewall/README.md
+++ b/modules/fabric-net-firewall/README.md
@@ -6,7 +6,7 @@ The HTTP and HTTPS rules use the same network tags that are assigned to instance
 
 All IP source ranges are configurable through variables, and are set by default to `0.0.0.0/0` for tag-based rules. Allowed protocols and/or ports for the intra-VPC rule are also configurable through a variable.
 
-Custom rules are set through a map where key is the rule name, and values must match this custom type:
+Custom rules are set through a map where keys are rule names, and values use this custom type:
 
 ```hcl
 map(object({