Should I create a VPN just to give two users access to a single AWS EC2 instance
Solution 1:
You can add extra security by only making it accessible from a certain IP, and have users connect to the VPN so their traffic is coming from that IP.
But using SSH keys is very secure already, so in my opinion there is no need to add a VPN in the middle with all the maintenance coming with it.