diff --git a/packages/aws/changelog.yml b/packages/aws/changelog.yml
index 59d57e78f6a..a44248a1996 100644
--- a/packages/aws/changelog.yml
+++ b/packages/aws/changelog.yml
@@ -59,6 +59,11 @@
     - description: Enable Identity Federation for Config, Inspector, aws-cloudwatch log streams, and all aws/metrics streams. Migrates Config (CEL) and Inspector (HTTPJSON) from hand-rolled SigV4 signing to the input's auth.aws configuration, adding Cloud Connectors support and fixing silent session-token breakage. Adds use_cloud_connectors to aws-cloudwatch and aws/metrics stream templates.
       type: enhancement
       link: https://github.com/elastic/integrations/pull/20527
+- version: "7.1.2"
+  changes:
+    - description: Add an `Instance or Pod IAM Role` option to the `Setup Access` selector so Elastic Agent can authenticate with the AWS SDK default credential chain (EC2 instance profile, EKS Pod Identity or IRSA) without entering access keys or a Role ARN. Since 7.0.0 every option required at least one credential field, which made this documented path impossible to save.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/21046
 - version: "7.1.1"
   changes:
     - description: Add `data_stream.namespace` to the Amazon Inspector vulnerability latest transform's unique key so findings are tracked per namespace, preventing findings ingested into non-default namespaces from being dropped or conflated in the latest index. Bump transform's destination suffix to `-v2`.