Yeah that makes sense, we use Circle for automation of the deployments, but when performing a local deployment we use aws-okta to SSO into the respective accounts. I just wasn’t sure if anyone had any specific workflows with dealing for separate accounts. One example is we need a few resources to exist in the non prod account (s3 buckets) and not in prod, so we’ve just created a specific section where those resources are only included during build if the stack matches a specific environment.