On-demand, self-service infrastructure application environments are requirements within the CICD pipeline. Accounting for the entire lifecycle from creation to teardown is where the headaches happen. Trying to leverage your existing IaC and gain guardrails like RBAC access control and cost control/optimization is the challenge.