diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4cdcf4c..f5d0959 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## v1.4.0
+
+- [Replace security groups on destroy for Lambdas in VPCs](https://github.com/babbel/terraform-aws-lambda-with-inline-code/pull/23)
+
 ## v1.3.0
 
 - [Add VPC support](https://github.com/babbel/terraform-aws-lambda-with-inline-code/pull/19)
diff --git a/main.tf b/main.tf
index ee24a6c..e553a67 100644
--- a/main.tf
+++ b/main.tf
@@ -21,6 +21,8 @@ resource "aws_lambda_function" "this" {
     }
   }
 
+  replace_security_groups_on_destroy = var.vpc_config != null ? true : null
+
   dynamic "environment" {
     // local.environments is built using a merge, and merges always result in a map
     // so we can safely assume we're dealing with a map here.