diff --git a/agent/structs/config_entry_jwt_provider_test.go b/agent/structs/config_entry_jwt_provider_test.go
index f2664a53dc..48e965c795 100644
--- a/agent/structs/config_entry_jwt_provider_test.go
+++ b/agent/structs/config_entry_jwt_provider_test.go
@@ -339,11 +339,17 @@ func TestJWTProviderConfigEntry_ACLs(t *testing.T) {
 					canWrite:   false,
 				},
 				{
-					name:       "jwt-provider: service write",
+					name:       "jwt-provider: any service write",
 					authorizer: newTestAuthz(t, `service "" { policy = "write" }`),
 					canRead:    true,
 					canWrite:   false,
 				},
+				{
+					name:       "jwt-provider: specific service write",
+					authorizer: newTestAuthz(t, `service "web" { policy = "write" }`),
+					canRead:    true,
+					canWrite:   false,
+				},
 				{
 					name:       "jwt-provider: mesh read",
 					authorizer: newTestAuthz(t, `mesh = "read"`),