diff --git a/.changelog/15806.txt b/.changelog/15806.txt
new file mode 100644
index 000000000000..78b8e24ec1a3
--- /dev/null
+++ b/.changelog/15806.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpn_connection: Mark `customer_gateway_configuration` as [`Sensitive`](https://www.terraform.io/plugin/sdkv2/best-practices/sensitive-state#using-the-sensitive-flag)
+```
\ No newline at end of file