I like to deploy automatically from pushes to dev, staging and main which are all gated by mandatory PR reviews, and any scripts run from Lambda which are gated

I like to deploy automatically from pushes to dev, staging and main which are all gated by mandatory PR reviews, and any scripts run from Lambda which are gated by account access, so it's always a deliberate occurrence and only certain people can trigger it and nobody needs to be doing anything manually against the environments.