You can get new tokens. Image pulling times out after ~30s, which tells me that maybe ECR is actually up, but it can't verify the caller's credentials or access image metadata from some other internal service. It's probably something low level that crashed, taking down anything built above it.
Actually, images that do not exist will return the appropriate error within a few seconds, so it's really timing out when talking to the storage layer or similar.