1. ECR Repositories Should Be Private