Only write path: a PR to the Terraform owning the repo. Never batch-delete-image. Same PR adds a Docker Hub pull-through cache rule.
Full build 👇
https://devtocash.com/blog/2026-10-16-ecr-cost-agent-untagged-images-lifecycle-policies-images-no-cluster-runs
#AWS #FinOps
