diff --git a/docs/configuration/cluster-advanced-settings.mdx b/docs/configuration/cluster-advanced-settings.mdx
index 996dadf..f8cd543 100644
--- a/docs/configuration/cluster-advanced-settings.mdx
+++ b/docs/configuration/cluster-advanced-settings.mdx
@@ -520,6 +520,35 @@ Changing this setting will only affect new ECR repositories created after the ch
 
 **Default Value:** `31536000` (1 year)
 
+<a id="aws-ecr-enable-pull-through-cache"></a>
+
+### aws.ecr.enable_pull_through_cache
+
+**Cloud Provider:** <img src="/images/logos/cloud-providers/aws-icon.svg" alt="AWS" width="20"  style={{display: "inline", verticalAlign: "middle", marginRight: "4px"}} />
+
+**Type:** `boolean`
+
+**Description:** Cache the public ECR images used by Qovery-managed infrastructure components in the private ECR registry of the cluster's AWS account and region. This reduces NAT Gateway traffic generated when nodes pull system images from `public.ecr.aws`.
+
+When enabled, Qovery:
+
+- Configures an Amazon ECR pull through cache rule for `public.ecr.aws` under the `qovery-ecr-public` repository prefix.
+- Rewrites public ECR image references in Qovery-managed infrastructure Helm charts to use the private regional ECR registry.
+- Grants EKS worker and Karpenter node roles the permissions required to populate the cache on the first pull.
+- Creates the `ecr.api` and `ecr.dkr` interface VPC endpoints. Image layers use the S3 gateway endpoint.
+
+<Warning>
+This setting is available only for Qovery-managed EKS clusters that use Karpenter and a Qovery-managed VPC with NAT Gateways. It is not supported for clusters without NAT Gateways or clusters using a user-provided network. Availability is currently limited to organizations enabled by Qovery.
+</Warning>
+
+<Info>
+Cached images expire 90 days after they are imported into the private ECR registry. If an expired image is requested again, Amazon ECR imports it again from the public registry. Enabling this setting adds private ECR storage and VPC interface endpoint charges to the AWS account, while reducing NAT Gateway processing charges for public ECR pulls.
+</Info>
+
+See [Amazon ECR pull through cache rules](https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-through-cache.html) for details about how Amazon ECR populates and refreshes cached images.
+
+**Default Value:** `false`
+
 <a id="registry-mirroring-mode"></a>
 
 ### registry.mirroring_mode