diff --git a/CHANGELOG.md b/CHANGELOG.md
index 68f07c792..b2c25ccda 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 BUG FIXES:
 
 * builder/all: timeout waiting for SSH connection is a failure. [GH-491]
+* builder/amazon: Scrub sensitive data from the logs. [GH-521]
 * builder/digitalocean: don't panic if erroneous API response doesn't
   contain error message. [GH-492]
 * builder/digitalocean: scrub API keys from config debug output [GH-516]