Update CHANGELOG for hashicorp#11062

CHANGELOG.md

@@ -9,10 +9,12 @@ ENHANCEMENTS:
 * data-source/aws_api_gateway_vpc_link: Add `description`, `status`, `status_message`, `tags`, and `target_arns` attributes [GH-10822]
 * data-source/aws_dynamodb_table: Add `server_side_encryption` `kms_key_arn` attribute [GH-11081]
 * data-source/aws_efs_file_system: Add `lifecycle_policy`, `provisioned_throughput_in_mibps`, and `throughput_mode` attributes [GH-11647]
+* data-source/aws_kms_key: Add `customer_master_key_spec` attribute [GH-11062]
 * resource/aws_dynamodb_table: Add `server_side_encryption` configuration block `kms_key_arn` argument (support customer managed CMKs for server-side encryption) [GH-11081]
 * resource/aws_dynamodb_table: Support in-place updates for `server_side_encryption` configurations [GH-11081]
 * resource/aws_elasticsearch_domain: Add `domain_endpoint_options` configuration block (support enforcing HTTPS) [GH-10430]
 * resource/aws_gamelift_fleet: Add `fleet_type` argument (support Spot Fleets) [GH-8234]
+* resource/aws_kms_key: Add `customer_master_key_spec` argument and plan-time validation support for `key_usage` value `SIGN_VERIFY` (support asymmetric keys) [GH-11062]
 * resource/aws_sagemaker_notebook_instance: Add `direct_internet_access` argument [GH-8618]
 * resource/aws_ssm_maintenance_window: Add `description` argument [GH-11478]
 * resource/aws_storagegateway_gateway: Add `cloudwatch_log_group_arn` argument [GH-10939]