Canva Environment Isolation

Overview

Give each environment an independent Canva integration and trust boundary. Prevent a staging build, callback, credential, user, or token record from resolving to production.

Prerequisites

• Named environments, owners, domains, and deployment identities
• Separate Developer Portal integrations and redirect URIs
• Secret backend, token namespace, test-user, data, and audit policy per environment

Instructions

Step 1: Build the matrix

Use Read and Grep to map environment to integration ID, exact redirect hosts, scopes, preview features, secret references, token/data namespace, and owners.

Step 2: Separate integrations