diff --git a/CHANGELOG.md b/CHANGELOG.md
index 121449264e..7e650ce023 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,8 @@ CHANGES:
 
 IMPROVEMENTS:
 
+ * auth/aws: AWS EC2 authentication can optionally create entity aliases by
+   role ID [GH-6133]
  * auth/jwt: The supported set of signing algorithms is now configurable [JWT
    plugin GH-16]
  * core: When starting from an uninitialized state, HA nodes will now attempt