diff --git a/CHANGELOG.md b/CHANGELOG.md
index d3b2cd04788..d78e52ec63e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 ENHANCEMENTS:
 
+* resource/aws_codepipeline_webhook: Support in-place `tags` updates [GH-11387]
 * resource/aws_gamelift_alias: Add `tags` argument [GH-11486]
 * resource/aws_gamelift_build: Add `tags` argument and `arn` attribute [GH-11486]
 * resource/aws_gamelift_game_session_queue: Add `tags` argument [GH-11486]
@@ -10,6 +11,7 @@ ENHANCEMENTS:
 
 BUG FIXES:
 
+* resource/aws_codepipeline_webhook: Properly trigger resource recreation when `authentication_configuration` configuration block `allowed_ip_range` and `secret_token` arguments change [GH-11387]
 * resource/aws_emr_cluster: Prevent perpetual difference with `ec2_attributes` configuration block `emr_managed_master_security_group`, `emr_managed_slave_security_group`, and `service_access_security_groups` arguments when omitted (support EMR Managed Security Groups) [GH-5493]
 * resource/aws_opsworks_permission: Prevent `Unable to change own permission level` error during self updates [GH-11379]