macOS Ventura EC2 Instance System Preferences & Safari Hangs

I've created multiple EC2 mac1.metal and mac2.metal instances and I often get weird issues. This has happened twice in a row in ap-southeast-2 with mac1.metal, ami-0cc8ddd1234c288f6 (amzn-ec2-macos-13.5-20230807-221257).

I am connecting to VNC via SSH tunnelling.

1. I can open Safari and load a simple page, like http://ifconfig.me, but if I open https://www.google.com and click on a link Safari will hang. I have to force quit it. If I open it again it will hang again.
2. In System Settings if I go to General, I cannot click on Date & Time, if I try to click on it, nothing happens. But I can open other things like Language & Region.
3. Sometimes a notification will get stuck. I cannot dismiss it.

When Safari hangs, I can still open other apps, like Finder etc. So VNC is working.

I can change the timezone via the CLI and it applies.

If I install chrome by uploading the DMG over SSH it can browse the web even though Safari hangs.

Rebooting does not fix these issues, they persist a reboot, or a power off and back on.

Sometimes when I VNC in there will be an animation of the wallpaper, like it keeps zooming in like a fractal. It repeats forever and I cannot login to see the dock etc. Sometimes trying to login over VNC, after entering the user's password on the GUI login, the wheel will spin forever, and I cannot make it to the dock etc.

Once VNC has broken it says broken, even if I reboot, or re-run the setup commands.

I have configured VNC with these commands:

sudo passwd ec2-user
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -restart -agent -privs -all
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -clientopts -setvnclegacy -vnclegacy yes
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -clientopts -setvncpw -vncpw REMOVED
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -restart -agent -console

sw_vers

ProductName:            macOS
ProductVersion:         13.5
BuildVersion:           22G74

It feels to me that the macOS is very unstable in AWS. It seems some service(s) that System Preferences, Safari, Notifications depend on is flakey.

One an instance that was in the bad state, I tried to enroll it into JAMF with MDM profile. It got stuck in /usr/local/jamf/bin/jamf postMdmEnrollment -server_url https://<removed> -invitation <removed>. I did a software update and upgraded it from macOS 13.5 to macOS 13.5.1 and this fixed a lot of things, but the MDM/JAMF profile doesn't support 13.5.1 and this caused other problems with software incompatibilities.