diff --git a/.changelog/8165.txt b/.changelog/8165.txt
new file mode 100644
index 00000000000..73bb94f4817
--- /dev/null
+++ b/.changelog/8165.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+compute: fixed wrongly trigger recreation on changes of `enforce_on_key_configs` on `google_compute_security_policy`
+```
diff --git a/google/services/compute/resource_compute_security_policy.go b/google/services/compute/resource_compute_security_policy.go
index 3dc0a3ce377..8871952f2d7 100644
--- a/google/services/compute/resource_compute_security_policy.go
+++ b/google/services/compute/resource_compute_security_policy.go
@@ -650,7 +650,6 @@ func resourceComputeSecurityPolicyUpdate(d *schema.ResourceData, meta interface{
 			nPriorities[priority] = true
 			if !oPriorities[priority] {
 				client := config.NewComputeClient(userAgent)
-
 				// If the rule is in new and its priority does not exist in old, then add it.
 				op, err := client.SecurityPolicies.AddRule(project, sp, expandSecurityPolicyRule(rule)).Do()