Allow requests to elastic deployment only from AWS EC2 instances in VPN

Elastic Stack Elasticsearch
1

Is it possible to restrict access to elastic deployment only from AWS EC2 instances that are part of a particular VPN?

2

Of course, network security is multi-faceted... (you can implement your own FWs, VPC controls, Private link etc..etc..)

Here are the built-in features for self-managed elasticsearch