diff --git a/detections/cloud/cloud_provisioning_from_previously_unseen_city.yml b/detections/cloud/cloud_provisioning_from_previously_unseen_city.yml
index aa1b0b25d6..a54ffb49d6 100644
--- a/detections/cloud/cloud_provisioning_from_previously_unseen_city.yml
+++ b/detections/cloud/cloud_provisioning_from_previously_unseen_city.yml
@@ -70,3 +70,4 @@ tags:
   risk_object_type: user
   risk_score: 10
   security_domain: endpoint
+