What do you mean by a VPN connection? Doing direct connect and then your own transport, or just the aws IPSec tunnel stuff over their normal transport?