diff --git a/env0/data_configuration_variable.go b/env0/data_configuration_variable.go
index 993d3b4e..542ef312 100644
--- a/env0/data_configuration_variable.go
+++ b/env0/data_configuration_variable.go
@@ -71,6 +71,7 @@ func dataConfigurationVariable() *schema.Resource {
 				Type:        schema.TypeString,
 				Description: "value stored in the variable",
 				Computed:    true,
+				Sensitive:   true,
 			},
 			"is_sensitive": {
 				Type:        schema.TypeBool,
diff --git a/env0/resource_configuration_variable.go b/env0/resource_configuration_variable.go
index 3b0925f8..9831aaed 100644
--- a/env0/resource_configuration_variable.go
+++ b/env0/resource_configuration_variable.go
@@ -36,6 +36,7 @@ func resourceConfigurationVariable() *schema.Resource {
 				Type:        schema.TypeString,
 				Description: "value for the configuration variable",
 				Required:    true,
+				Sensitive:   true,
 			},
 			"is_sensitive": {
 				Type:        schema.TypeBool,
diff --git a/tests/integration/003_configuration_variable/main.tf b/tests/integration/003_configuration_variable/main.tf
index 501f4630..05e2f66d 100644
--- a/tests/integration/003_configuration_variable/main.tf
+++ b/tests/integration/003_configuration_variable/main.tf
@@ -2,7 +2,8 @@ data "env0_configuration_variable" "region" {
   name = "AWS_DEFAULT_REGION"
 }
 output "region_value" {
-  value = data.env0_configuration_variable.region.value
+  value     = data.env0_configuration_variable.region.value
+  sensitive = true
 }
 output "region_id" {
   value = data.env0_configuration_variable.region.id
@@ -17,7 +18,8 @@ data "env0_configuration_variable" "region_in_project" {
   project_id = data.env0_project.default.id
 }
 output "region_in_project_value" {
-  value = data.env0_configuration_variable.region_in_project.value
+  value     = data.env0_configuration_variable.region_in_project.value
+  sensitive = true
 }
 output "region_in_project_id" {
   value = data.env0_configuration_variable.region_in_project.id
@@ -33,7 +35,8 @@ data "env0_configuration_variable" "tested1" {
 }
 
 output "tested1_value" {
-  value = data.env0_configuration_variable.tested1.value
+  value     = data.env0_configuration_variable.tested1.value
+  sensitive = true
 }
 
 data "env0_configuration_variable" "tested2" {
@@ -52,8 +55,10 @@ data "env0_configuration_variable" "tested3" {
 
 
 output "tested3_enum_1" {
-  value = data.env0_configuration_variable.tested3.enum[0]
+  value     = data.env0_configuration_variable.tested3.enum[0]
+  sensitive = true
 }
 output "tested3_enum_2" {
-  value = data.env0_configuration_variable.tested3.enum[1]
+  value     = data.env0_configuration_variable.tested3.enum[1]
+  sensitive = true
 }
\ No newline at end of file