According to this KB https://www.veeam.com/kb4264 I successfully configured restore to AWS EC2 via endpoints and VPN. So I can restore VM from vsphere to EC2 via VPN.
And now I have question :)
Is it possible to make restore from EC2 to on premise via VPN, not thounght Internet?