diff --git a/examples/basic/variables.tf b/examples/basic/variables.tf
index d2e11f4b..2268ef53 100644
--- a/examples/basic/variables.tf
+++ b/examples/basic/variables.tf
@@ -59,7 +59,7 @@ variable "service_endpoints" {
   default     = "public"
 
   validation {
-    condition     = can(regex("public|public-and-private|private", var.service_endpoints))
+    condition     = can(regex("^(public|public-and-private|private)$", var.service_endpoints))
     error_message = "Valid values for service_endpoints are 'public', 'public-and-private', and 'private'"
   }
 }
diff --git a/solutions/fully-configurable/variables.tf b/solutions/fully-configurable/variables.tf
index 9494f3e7..c71a7882 100644
--- a/solutions/fully-configurable/variables.tf
+++ b/solutions/fully-configurable/variables.tf
@@ -86,7 +86,7 @@ variable "service_endpoints" {
   default     = "private"
 
   validation {
-    condition     = can(regex("public|public-and-private|private", var.service_endpoints))
+    condition     = can(regex("^(public|public-and-private|private)$", var.service_endpoints))
     error_message = "Valid values for service_endpoints are 'public', 'public-and-private', and 'private'"
   }
 }
@@ -265,7 +265,7 @@ variable "kms_endpoint_type" {
   default     = "private"
 
   validation {
-    condition     = can(regex("public|private", var.kms_endpoint_type))
+    condition     = can(regex("^(public|private)$", var.kms_endpoint_type))
     error_message = "The kms_endpoint_type value must be 'public' or 'private'."
   }
 }
diff --git a/variables.tf b/variables.tf
index 0118b382..6be03ea6 100644
--- a/variables.tf
+++ b/variables.tf
@@ -113,7 +113,7 @@ variable "service_endpoints" {
   default     = "private"
 
   validation {
-    condition     = can(regex("public|public-and-private|private", var.service_endpoints))
+    condition     = can(regex("^(public|public-and-private|private)$", var.service_endpoints))
     error_message = "Valid values for service_endpoints are 'public', 'public-and-private', and 'private'"
   }
 }