Thanks, this was very helpful. For anyone reading this later, I would recommend setting up a VPC endpoint for your ECR, this will save a ton in expensive NAT gateway costs.

https://aws.amazon.com/blogs/compute/setting-up-aws-privatelink-for-amazon-ecs-and-amazon-ecr/