Since nobody else asked. If your team isn't infra/acting as infra then you don't. Least required access, set up a dev environment with CI/CD and if they need t

Since nobody else asked. If your team isn't infra/acting as infra then you don't. Least required access, set up a dev environment with CI/CD and if they need to do any local dev(frontend contacting your API etc) then implement auth you are in control of. If your team needs to make actual API calls to external services for dev, change that, you codebase is likely not testable. Integration tests should run on CI. Much of this is likely a few days work if your codebase isn't massive and if your codebase is massive then put that in the next sprint.