Hi Runamok, Today given that aliases/versions do not have any sort of different permissions you are probably best to either run completely different stacks of

Hi Runamok, Today given that aliases/versions do not have any sort of different permissions you are probably best to either run completely different stacks of resources or the multiple account model. With AWS Organizations these days its not that hard to run multiple environments across accounts. We did a webinar on some of this a few months back, the slides here might be useful to you: https://www.slideshare.net/AmazonWebServices/building-a-development-workflow-for-serverless-applications-march-2017-aws-online-tech-talks https://www.slideshare.net/AmazonWebServices/building-a-deve... It heavily leverages AWS's tools, but you could create similar practices using 3rd party frameworks and CI/CD tools as well. Thanks, -munns