diff --git a/CHANGELOG.md b/CHANGELOG.md
index f01216bcf..0e1f49be4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -58,15 +58,16 @@ BUG FIXES:
  * provider/alicloud: Fix allocate public ip error [GH-13268]
  * provider/alicloud: alicloud_security_group_rule: check ptr before use it [GH-13731)
  * provider/alicloud: alicloud_instance: fix ecs internet_max_bandwidth_out cannot set zero bug [GH-13731]
- * provider/aws: Fix DB Parameter Group Name [GH-13279]
- * provider/aws: Increase default number of retries from 11 to 25 [GH-13673]
- * provider/aws: Use mutex & retry for WAF change operations [GH-13656]
- * provider/aws: Remove aws_vpc_dhcp_options if not found [GH-13610]
- * provider/aws: Remove aws_network_acl_rule if not found [GH-13608]
+ * provider/aws: Allow force-destroying `aws_route53_zone` which has trailing dot [GH-12421]
  * provider/aws: Allow GovCloud KMS ARNs to pass validation in `kms_key_id` attributes [GH-13699]
  * provider/aws: Changing aws_opsworks_instance should ForceNew [GH-13839]
+ * provider/aws: Fix DB Parameter Group Name [GH-13279]
  * provider/aws: Fix issue importing some Security Groups and Rules based on rule structure [GH-13630]
- * provider/aws: Allow force-destroying `aws_route53_zone` which has trailing dot [GH-12421]
+ * provider/aws: Fix issue for cross account IAM role with `aws_lambda_permission` [GH-13865]
+ * provider/aws: Increase default number of retries from 11 to 25 [GH-13673]
+ * provider/aws: Remove aws_vpc_dhcp_options if not found [GH-13610]
+ * provider/aws: Remove aws_network_acl_rule if not found [GH-13608]
+ * provider/aws: Use mutex & retry for WAF change operations [GH-13656]
  * provider/azurerm: azurerm_redis_cache resource missing hostname [GH-13650]
  * provider/azurerm: Locking around Network Security Group / Subnets [GH-13637]
  * provider/azurerm: Locking route table on subnet create/delete [GH-13791]