It should take in a repo name and a default repository policy that can be overridden. The default policy should allow ECS and Lambda to pull from ECR