Tomcat 9 on Windows 2019 Memory Issue

Question

I'm running an open source application (Apereo Central Authentication Service) on Tomcat 9.0.43 running as a Windows Service. Below is a log file extract showing the environment details. The application runs on four Windows VMs, two in our data center and two in AWS.

The hosts in our data center show ever-increasing memory usage for Tomcat9. So much so that we had to add some RAM in order to maintain the service. We can see java heap utilization rising and falling as you'd expect, but the memory used by the windows process constantly trends upwards. We suspected an application memory leak, but we do not see this behavior on the identical VMs in AWS.

I don't know enough about the ins and outs of JVM memory allocation to know the best way to troubleshoot this. Any suggestions are welcome.

This is logged at startup:

Server version name:   Apache Tomcat/9.0.43
Server built:          Jan 28 2021 20:25:45 UTC
Server version number: 9.0.43.0
OS Name:               Windows Server 2016
OS Version:            10.0
Architecture:          amd64
Java Home:             D:\Programs\jdk-11
JVM Version:           11+28
JVM Vendor:            Oracle Corporation
CATALINA_BASE:         D:\Programs\apache-tomcat-base
CATALINA_HOME:         D:\Programs\apache-tomcat-9.0.43
Command line argument: -Dcatalina.home=D:\Programs\apache-tomcat-9.0.43
Command line argument: -Dcatalina.base=D:\Programs\apache-tomcat-base
Command line argument: -Dignore.endorsed.dirs=D:\Programs\apache-tomcat-9.0.43\endorsed
Command line argument: -Djava.io.tmpdir=D:\Programs\apache-tomcat-base\temp
Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
Command line argument: -Djava.util.logging.config.file=D:\Programs\apache-tomcat-base\conf\logging.properties
Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
Command line argument: exit
Command line argument: abort
Command line argument: -Xms4096m
Command line argument: -Xmx4096m