I haven’t tried them yet so not sure how image versioning works. I prefer to build and push docker images to ECR separately and always using a unique tag, usually the git commit hash. Then I use pulumi to update the task definition with the new image url where the tag is set from an env variable.