diff --git a/CHANGELOG.md b/CHANGELOG.md
index 271b421..9986d8b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -114,4 +114,8 @@
   - vpn and vpn-transit-gateway
     - add outputs of customer_gateway_arns and customer_gateway_ids
 
+* 1.6.3 -- 2022-03-25
+  - vpn
+    - fix up vpn_config_output
+
 ## Version 2.x
diff --git a/common/version.tf b/common/version.tf
index a33a031..e9c9d85 100644
--- a/common/version.tf
+++ b/common/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "1.6.2"
+  _module_version = "1.6.3"
 }
diff --git a/vpn/vpn-config.tf b/vpn/vpn-config.tf
index df1059d..ac1ab2c 100644
--- a/vpn/vpn-config.tf
+++ b/vpn/vpn-config.tf
@@ -1,10 +1,10 @@
 locals {
   vpn_tunnel_outputs = { for k, v in local.vpn_settings : k => {
     site              = v.site
-    environment       = v.environment
-    sequence          = v.sequence
-    label             = v.label
-    full_label        = format("aws:%v:%v:%v:%v", local.region, local.account_id, aws_vpn_connection.vpn[k].id, v.label)
+    environment       = lookup(v, "environment", null)
+    sequence          = lookup(v, "sequence", null)
+    label             = lookup(v, "label", null)
+    full_label        = format("aws:%v:%v:%v:%v", local.region, local.account_id, aws_vpn_connection.vpn[k].id, lookup(v, "label", null))
     customer_address  = aws_customer_gateway.vpn[k].ip_address
     bgp_asn           = aws_customer_gateway.vpn[k].bgp_asn
     vpn_connection_id = aws_vpn_connection.vpn[k].id