A company is running a production workload on Amazon ECS using the EC2 launch type. They store their Docker container images in Amazon ECR. To improve security, the company wants to ensure that only authorized ECS tasks can pull images from ECR. What should they do to secure the ECS-ECR interaction?