diff --git a/CHANGELOG.md b/CHANGELOG.md
index e2f9d407744..6b53adf61a7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ ENHANCEMENTS:
 * data-source/aws_dynamodb_table: Add `billing_mode` and `point_in_time_recovery` attributes [GH-7497]
 * resource/aws_appmesh_virtual_node: Add support for listener health checks [GH-7446]
 * resource/aws_cloudwatch_metric_alarm: Add `metric_query` argument (support math expressions) [GH-6833]
+* resource/aws_cognito_user_pool: Add `user_pool_add_ons` argument (support advanced security mode) [GH-7361]
 * resource/aws_directory_service_directory: Set `security_group_id` attribute when type is `ADConnector` [GH-7487]
 * resource/aws_dynamodb_table: Use `update` customizable timeout for individual Global Secondary Index updates and increase default `update` timeout from 10 minutes to 60 minutes [GH-7453]
 * resource/aws_dms_endpoint: Add `docdb` for `engine_name` validation [GH-7491]