AlexHK thanks for the update after enabling Clam antivirus, immediate the memory consumption jumped, so I decided to upgrade to t3a.medium. GP3. As the server isn't handling any traffic yet apart from some testing and sitting at 2.2GB we are already using the SWAP.