diff --git a/jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/testutil/AsmSecretTesterBase.java b/jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/testutil/AsmSecretTesterBase.java
index f926cde9b31..6de8e977baa 100644
--- a/jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/testutil/AsmSecretTesterBase.java
+++ b/jdisc-cloud-aws/src/main/java/ai/vespa/secret/aws/testutil/AsmSecretTesterBase.java
@@ -87,7 +87,8 @@ public void close() {
 
         protected List<String> toAwsStages(SecretVersionState state) {
             return switch (state) {
-                case CURRENT -> List.of("AWSCURRENT");
+                // We don't remove the AWSPENDING label when setting AWSCURRENT
+                case CURRENT -> List.of("AWSPENDING", "AWSCURRENT");
                 case PENDING -> List.of("AWSPENDING");
                 case PREVIOUS, DEPRECATED -> List.of();
             };