Amazon ECR now supports pull through cache for Chainguard
aws.amazon.com