diff --git a/CHANGELOG.md b/CHANGELOG.md
index 270c9bae591..829cc0a9963 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,7 @@ BUG FIXES:
 * resource/aws_athena_database: Handle database names with uppercase and underscores [GH-4133]
 * resource/aws_codebuild_project: Retry UpdateProject for IAM eventual consistency [GH-4238]
 * resource/aws_codedeploy_deployment_config: Force new resource for `minimum_healthy_hosts` updates [GH-4194]
+* resource/aws_cognito_user_group: Fix `role_arn` updates [GH-4237]
 * resource/aws_elasticache_replication_group: Increase default create timeout to 60 minutes [GH-4093]
 * resource/aws_emr_cluster: Force new resource if any of the `ec2_attributes` change [GH-4218]
 * resource/aws_iam_role: Suppress `NoSuchEntity` errors while detaching policies from role during deletion [GH-4209]