ran into two issues with the --version pinning flow that I think are worth fixing:
Running the bootstrap script without --version defaults to the latest release (currently 3.3.5), but the traffic-capture-proxy image for 3.3.5 isn't published in the public ECR registry (MANIFEST_UNKNOWN error). Might be worth checking if that release is missing an image push.
Following the doc's own example and pinning --version 3.2.1 hits a second issue: the bootstrap script downloaded via releases/latest/download/aws-bootstrap.sh doesn't match the file layout of the 3.2.1 Helm chart — it looks for infra/mirror/private-ecr-manifest.yaml, which isn't in that archive. Seems like the script expects a newer repo structure than what 3.2.1 actually has.