That is a great example of VAR proving it's worth.
In real time it really looked like the defender got a touch on the ball, but it was the attacking player who touched it, the defender didn't get the ball, but you would need a close second look at it to know that. Penalty was the right decision...