If you are interested in a more robust solution, follow this thread. I will be open sourcing my setup for monitoring sometime this month.
https://www.elitetrader.com/et/threads/anyone-running-a-c-based-ats-hosted-on-aws.334577/
VNC over SSH is proving pretty robust for me FWIW. I log to the cloud too, using a log monitoring service which sets up alerts.
One situation where I need to log in over VNC is for some reason, IB isn't allowing new API connections. I have to log in to TWS, uncheck "allow ActiveX/socket connections", check it again and all is good. I use the log monitoring service to alert me when this is happening.