diff --git a/infrastructure/terraform/scripts/reconcile_from_plan.sh b/infrastructure/terraform/scripts/reconcile_from_plan.sh
index d1d25de..cf11360 100755
--- a/infrastructure/terraform/scripts/reconcile_from_plan.sh
+++ b/infrastructure/terraform/scripts/reconcile_from_plan.sh
@@ -66,8 +66,10 @@ if [[ ! -f "main.tf" ]] && ! compgen -G "*.tf" >/dev/null; then
   exit 1
 fi
 
-generated_tmp="$(mktemp -t terraform-generated-XXXXXX.tf)"
-trap 'rm -f "$generated_tmp"' EXIT
+generated_tmp_dir="$(mktemp -d -t terraform-generated-XXXXXX)"
+generated_tmp="$generated_tmp_dir/generated.tf"
+# terraform plan -generate-config-out requires a path that does not already exist
+trap 'rm -rf "$generated_tmp_dir"' EXIT
 
 echo "Running: terraform plan -generate-config-out=$generated_tmp ${plan_args[*]-}"
 set +e