diff --git a/CHANGELOG.md b/CHANGELOG.md
index 57e34bb4e..d63d89c32 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -219,6 +219,21 @@ ensuring data is stored with proper parameter values.
 - **PyYAML declared as explicit runtime dependency** (#11012 / #13605): Added `pyyaml>=6.0.3` as a direct runtime dependency in `pyproject.toml`. PyYAML was previously only transitive (pulled via langchain ecosystem), listed solely as type stubs (`types-pyyaml>=6.0.0`) in the dev extras group, while being used at runtime in `src/cleveragents/actor/yaml_loader.py` for actor configuration YAML loading with Jinja2 template support and environment variable interpolation. This change explicitly pins the dependency to `>=6.0.3` to mitigate CVE-2025-8045 (arbitrary remote code execution via crafted YAML payloads) and prevents silent breakage if upstream transitive dependencies change their PyYAML requirements in future releases. The version floor ensures vulnerable versions (<6.0.3) cannot be installed even if upstream transitive dependencies have loose version constraints.
 
 - **plan explain output uses structured alternatives objects** (#9166): The `alternatives_considered` field is replaced with a structured `alternatives` array where each element contains an `"index"` (1-based), `"description"`, and `"chosen"` (bool) key.
+
+### Added
+
+- **Cloud Infrastructure Resource Types** (#10592): Implemented cloud infrastructure
+  resource type stubs for AWS, GCP, and Azure providers. This includes Pydantic model
+  definitions in `src/cleveragents/resource/handlers/cloud.py` with credential resolution
+  (`resolve_credentials`) and validation (`validate_credentials`), built-in type
+  registry entries (`aws-account`, `gcp`, `azure`) with hierarchical CLI argument
+  definitions, provider extraction from type names via prefix matching, three BDD
+  feature files (`cloud_resources.feature`, `cloud_handler_coverage.feature`,
+  `cloud_handler_coverage_r3.feature`) covering credential masking, inheritance
+  chains, sandbox strategies, and full ResourceHandler Protocol conformance testing
+  for CRUD and lifecycle stub methods (read, write, delete, list_children, diff,
+  discover_children, create_sandbox, create_checkpoint, rollback_to, project_access).
+
 - Fixed `ReactiveEventBus.emit()` exception handler to log the full exception
   message (`str(exc)`) and enable traceback forwarding (`exc_info=True`).
   Previously the handler logged only the exception type name (e.g.