diff --git a/CHANGELOG.md b/CHANGELOG.md
index 805266628f..6f7c835cfa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,6 +22,7 @@ IMPROVEMENTS:
   * provider/aws: Add a computed ARN for S3 Buckets [GH-3685]
   * provider/aws: Add configuration to enable copying RDS tags to final snapshot [GH-3529]
   * provider/openstack: Use IPv4 as the defeault IP version for subnets [GH-3091]
+  * provider/aws: Apply security group after restoring db_instance from snapshot [GH-3513]
 
 BUG FIXES: