diff --git a/aws-assume-role-policy/module_test.go b/aws-assume-role-policy/module_test.go
index 7d5844fc..f70d3739 100644
--- a/aws-assume-role-policy/module_test.go
+++ b/aws-assume-role-policy/module_test.go
@@ -1,6 +1,7 @@
 package test
 
 import (
+	"fmt"
 	"testing"
 
 	"github.com/chanzuckerberg/go-misc/tftest"
@@ -24,6 +25,7 @@ func TestAWSAssumeRolePolicy(t *testing.T) {
 				tftest.IAMRegion,
 				map[string]interface{}{
 					"source_account_ids": []string{curAcct},
+					"source_role_arns": []string{fmt.Sprintf("arn:aws:iam::%s:role/okta-czi-admin", curAcct)},
 					"saml_idp_arns":      []string{"samlARN1", "samlARN2"},
 					"oidc":               oidcCfg,
 				},