Deployment is based on my old aws ecs/ecr deployer script. The IAM user is also a little too permissive.