I had ECR policy to accept push from the role in dev using the ARN. However, this method no longer works...