Use shared environment role.
Use a deploy user.