AWS::EC2::VPNConnection -

Performing an update to AWS::EC2::VPNConnection resource, except for Tags property triggers a Replacement behavior for this resource leading to issues for end consumers of this VPN connection.
We need a better logic to handle the VPN changes since this is a regular activity at the service for customers, and handling the resources the way it's being done invalidates the resource's usefulness.

Link to Public doc: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpn-connection.html

Start with the linked AWS CloudFormation public documentation and inspect the current update and replacement behavior for AWS::EC2::VPNConnection. Determine which non-Tag changes cause replacement and define the expected update behavior that preserves existing VPN consumers; the issue does not name repository files or tests, so the implementation entry point is not specified.

Written by the indexing model from the issue text.