hey yall, I'm migrating to prefect 2 and followed the ecs worker guide and the prefect recipe for an ecs worker but I'm getting an error when trying to pull my image from ECR. I don't think I'm short any permissions but there seems to be some networking issue happening. has anyone run into this before?

prefect_aws.workers.ecs_worker.TaskFailedToStart: ResourceInitializationError: unable to pull secrets or registry auth: execution resource retrieval failed: unable to retrieve ecr registry auth: service call has been retried 3 time(s): RequestError: send request failed caused by: Post "<https://api.ecr.us-west-2.amazonaws.com/>": dial tcp 34.223.25.158:443: i/o timeout. Please check your task network configuration.

do you have an internet gateway or a NAT gateway on your vpc?

@Kevin Grismore no, it is not

how is your VPC configured? there is a nice little network map view on the VPC page

ahhh ok, sorry. I do see a NAT/internet gateway in our VPC. the subnets I'm using use the NAT gateway