diff --git a/upup/pkg/kutil/delete_cluster.go b/upup/pkg/kutil/delete_cluster.go
index <HASH>..<HASH> 100644
--- a/upup/pkg/kutil/delete_cluster.go
+++ b/upup/pkg/kutil/delete_cluster.go
@@ -1468,7 +1468,7 @@ func FindNatGateways(cloud fi.Cloud, routeTableIds sets.String) ([]*ResourceTrac
 
 	var trackers []*ResourceTracker
 
-	{
+	if len(natGatewayIds) != 0 {
 		request := &ec2.DescribeNatGatewaysInput{}
 		for natGatewayId := range natGatewayIds {
 			request.NatGatewayIds = append(request.NatGatewayIds, aws.String(natGatewayId))
Don't delete NatGateways if there were none found

Because an empty filter means "list all NatGateways".