Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.

Prefect Community

hey yall, I'm migrating to prefect 2 and followed the <https://prefecthq.github.io/prefect-aws/ecs_guide/|ecs worker guide> and the prefect recipe for an <https://github.com/PrefectHQ/prefect-recipes/tree/main/devops/infrastructure-as-code/aws/tf-prefect2-ecs-worker|ecs worker> but I'm getting an error when trying to pull my image from ECR. I don't think I'm short any permissions but there seems to be some networking issue happening. has anyone run into this before?
```prefect_aws.workers.ecs_worker.TaskFailedToStart: ResourceInitializationError: unable to pull secrets or registry auth: execution resource retrieval failed: unable to retrieve ecr registry auth: service call has been retried 3 time(s): RequestError: send request failed caused by: Post "<https://api.ecr.us-west-2.amazonaws.com/>": dial tcp 34.223.25.158:443: i/o timeout. Please check your task network configuration.```

do you have an internet gateway or a NAT gateway on your vpc?

how is your VPC configured? there is a nice little network map view on the VPC page

ahhh ok, sorry. I do see a NAT/internet gateway in our VPC. the subnets I'm using use the NAT gateway