Does the AARNet connection speed need to match ExpressRoute circuit bandwidth?

If I pay for an ExpressRoute circuit of a given bandwidth, does the VPN connection I purchase from AARNet have to be the same speed?

No. You can purchase a VPN connection from AARNet at a higher speed. However, your connection to Azure will be limited to the ExpressRoute circuit bandwidth that you purchase from Microsoft.