[lambda]

The images I use the most, we pull and push to our own internal registry, so we have full control.

There are still some we pull from Docker Hub, especially in the build process of our own images.

To work around that, on AWS, you can prefix the image with public.ecr.aws/docker/library/ for example public.ecr.aws/docker/library/python:3.12 and it will pull from AWS's mirror of Docker Hub.

[doctoboggan]

> To work around that, on AWS, you can prefix the image with public.ecr.aws/docker/library/

I believe anyone can pull from the public ecr, not just clients in AWS

[lambda]

Yeah, anyone can, but I think you'll be rate limited if you're not on AWS. So fine for a one off, but not something to put in your CI.