This message was deleted.

For the interested: After some internal deliberation, we have opted to go the “namespace” route, where all sf resources visible throughout the accounts vill be suffixet with the stack name, such that roles vill be named like:

ROLE_(DEV|PRE|PROD)

depending on what “environment”/stack it belongs to.