Hey all, I am new to Prefect (Cloud) and am trying to set up flow runs on an ECS cluster with Fargate using serverless push work pools. My task runs are sometimes failing with

CannotPullContainerError: pull image manifest has been retried 5 time(s): failed to resolve ref <http://docker.io/prefecthq/prefect:2-latest|docker.io/prefecthq/prefect:2-latest>: failed to do request: Head "<https://registry-1.docker.io/v2/prefecthq/prefect/manifests/2-latest>": dial tcp 34.205.13.154:443: i/o timeout

I assume this is a connectivity issue and due to the ECS tasks being deployed in a random subnet, and if it is

private

the error occurs (no NAT gateway). How do I specify a subnet for my tasks? I couldn't find it in the Base Job Template of my work pool, is that even the right place? Much appreciated if someone could point me in the right direction.