The DevOps team at "CloudCanvas Inc.", managing hundreds of AWS accounts within an AWS Organization and expecting more, needs to establish a low-overhead solution for storing and managing Docker images in Amazon ECR for a new application, ensuring that only accounts within their organization can access the images, retaining all tagged images, and keeping only the five most recent untagged images. Which solution will meet these requirements with the LEAST operational overhead?