diff --git a/TODO.md b/TODO.md
index 8e80814f3a..d0959aba62 100644
--- a/TODO.md
+++ b/TODO.md
@@ -8,3 +8,7 @@ This is just to keep track of what we need to do in the short term.
       saying infra was destroyed.
   * Configuration schemas for providers and provisioners
   * Helper improvements around complex types perhaps
+  * Providers/AWS: `aws_security_group` needs an update func
+  * Providers/AWS: `aws_eip` needs an update func (re-assocation, I think this
+      is possible in the AWS API). `aws_eip` also needs improved tests
+