aws ecr set-repository-policy --policy-text "file:///foo.json" works, --policy-text "s3://...../foo.json" doesn't. Eat your shit, @awscloud