diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/deployment.yaml b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/deployment.yaml
index de1738b42a..6cceca8764 100644
--- a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/deployment.yaml
+++ b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/deployment.yaml
@@ -34,7 +34,7 @@ spec:
     spec:
       containers:
       - name: {{ .Values.fleetName }}
-        imagePullPolicy: always
+        imagePullPolicy: Always
         command: [/usr/bin/fleet]
         args: ["serve"]
         image: fleetdm/fleet:{{ .Values.imageTag }}
@@ -52,6 +52,8 @@ spec:
           ## BEGIN FLEET SECTION
           - name: FLEET_DEMO
             value: "1"
+          - name: FLEET_SERVER_SANDBOX_ENABLED
+            value: "1"
           - name: FLEET_SERVER_ADDRESS
             value: "0.0.0.0:{{ .Values.fleet.listenPort }}"
           - name: FLEET_AUTH_BCRYPT_COST
diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/job-migration.yaml b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/job-migration.yaml
index d8ebd308cd..4334b8ab68 100644
--- a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/job-migration.yaml
+++ b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/fleet/templates/job-migration.yaml
@@ -28,7 +28,7 @@ spec:
         command: [/usr/bin/fleet]
         args: ["prepare","db","--no-prompt"]
         image: fleetdm/fleet:{{ .Values.imageTag }}
-        imagePullPolicy: always
+        imagePullPolicy: Always
         resources:
           limits:
             cpu: {{ .Values.resources.limits.cpu }}