diff --git a/CHANGELOG.md b/CHANGELOG.md
index ab40b0b0ce..ac5f38d3cb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -78,8 +78,10 @@ IMPROVEMENTS:
 
  * audit: Added a unique identifier to each request which will also be found in
    the request portion of the response. [GH-1650]
- * auth/aws-ec2: Added a new constraint, 'bound_account_id' to the role
+ * auth/aws-ec2: Added a new constraint `bound_account_id` to the role
    [GH-1523]
+ * auth/aws-ec2: Added a new constraint `bound_iam_role_arn` to the role 
+   [GH-1522]
  * auth/aws-ec2: Added `ttl` field for the role [GH-1703]
  * auth/ldap, secret/cassandra, physical/consul: Clients with `tls.Config`
    have the minimum TLS version set to 1.2 by default. This is configurable.