or more specifically, https://gallery.ecr.aws/docker

for any "official" image you're pulling from docker hub, just prefix it with "public.ecr.aws/docker/library/" to pull from ecr instead