For good reasons, they don't have access to our infra.

I wasn't involved, but I heard last year they tried to vibedeploy, provisioning an AWS account in their own name with their own credit card. I let you imagine what happened and why they haven't retried this since.