AWS VPN monitor

Good day.

Have you already looked into CloudTrail events? https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/monitoring-cloudtrail.html

"When activity occurs in Client VPN, that activity is recorded in a CloudTrail event along with other AWS service events in Event history."

Remember that CloudTrail only supports 90 days in the dashboard by default, and if you need to retain a longer period then you should look into CloudTrail Trails (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html) or integrate CloudTrail with your SIEM solution.

I hope this helps!

Jason H.