To-do items Remove public access from S3 buckets Configure docker image to use aws s3 cp instead of wget Remove public access from bucket and grant task role access explicitly. Remove need to manually managed docker image and ECR Generate mongodb password and store within secrets manager