There are cases when pulling secrets fails despite having the appropriate roles.
This can happen when there is no network path configured in your VPC that allows the task to communicate with ECR and AWS Secrets Manager.
For suggestions how to fix this, see this link: amazon web services - Aws ecs fargate ResourceInitializationError: unable to pull secrets or registry auth - Stack Overflow