diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-cloudfront-origins/test/integ.function-url-origin.ts b/packages/@aws-cdk-testing/framework-integ/test/aws-cloudfront-origins/test/integ.function-url-origin.ts
index 9f3d6482f760e..f9dbb3bd17d76 100644
--- a/packages/@aws-cdk-testing/framework-integ/test/aws-cloudfront-origins/test/integ.function-url-origin.ts
+++ b/packages/@aws-cdk-testing/framework-integ/test/aws-cloudfront-origins/test/integ.function-url-origin.ts
@@ -18,8 +18,25 @@ const fnUrl = fn.addFunctionUrl({
   authType: lambda.FunctionUrlAuthType.NONE,
 });
 
+const oac = new cloudfront.CfnOriginAccessControl(
+  stack,
+  'HandlerOriginAccessControl',
+  {
+    originAccessControlConfig: {
+      name: 'sample',
+      originAccessControlOriginType: 'lambda',
+      signingBehavior: 'always',
+      signingProtocol: 'sigv4',
+    },
+  },
+);
+
 new cloudfront.Distribution(stack, 'Distribution', {
-  defaultBehavior: { origin: new origins.FunctionUrlOrigin(fnUrl) },
+  defaultBehavior: {
+    origin: new origins.FunctionUrlOrigin(fnUrl, {
+      originAccessControlId: oac.attrId,
+    }),
+  },
 });
 
 new IntegTest(app, 'rest-api-origin', {