diff --git a/CHANGELOG.md b/CHANGELOG.md
index 52c10ca..8a6741a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,6 +38,9 @@
   - split ldap variables into variables.ldap.tf
   - add defaults.tf
 
+* 1.3.2 -- 20211222
+  - output instance_profile_arn
+
 ## version 2.x
 
 branch: compat-tf-0.13
@@ -51,3 +54,6 @@ tag: 2.0.1
   - add max_session_duration variable
   - split ldap variables into variables.ldap.tf
   - add defaults.tf
+
+* 2.0.2 -- 20211222
+  - output instance_profile_arn
diff --git a/README.md b/README.md
index 0aa7636..085cdf6 100644
--- a/README.md
+++ b/README.md
@@ -160,6 +160,7 @@ No modules.
 
 | Name | Description |
 |------|-------------|
+| <a name="output_instance_profile_arn"></a> [instance\_profile\_arn](#output\_instance\_profile\_arn) | Created instance profile ARN, if enabled |
 | <a name="output_ldap_dn"></a> [ldap\_dn](#output\_ldap\_dn) | Created LDAP DN for role (empty if ldap is not enabled) |
 | <a name="output_role_arn"></a> [role\_arn](#output\_role\_arn) | Created role ARN |
 | <a name="output_role_name"></a> [role\_name](#output\_role\_name) | Created role name |
diff --git a/outputs.tf b/outputs.tf
index 84a527a..312ad09 100644
--- a/outputs.tf
+++ b/outputs.tf
@@ -13,3 +13,8 @@ output "ldap_dn" {
   description = "Created LDAP DN for role (empty if ldap is not enabled)"
   value       = local.enable_ldap ? local.ldap_dn : ""
 }
+
+output "instance_profile_arn" {
+  description = "Created instance profile ARN, if enabled"
+  value       = var.enable_instance_profile ? aws_iam_instance_profile.role.arn : ""
+}
diff --git a/version.tf b/version.tf
index e4a1130..5ec2ece 100644
--- a/version.tf
+++ b/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "1.3.1"
+  _module_version = "1.3.2"
 }