Yeah, if your ecr repo doesn’t have tag immutability ON then whenever a new version of latest tag is available and some node pulls it then your cache ecr repo will update the image to the new latest image. Note, that using latest tag is not advised and I personally don’t allow for tag mutability. Regarding forcing tag update, I don’t believe there is a way apart from setting pull policy to always.