When you encounter a problem like this, the cause could be missing IAM policies related to container access. ECR or EC2.
CannotPullContainerError: pull image manifest has been retried 1 time(s)