Looking for a way to exclude a resource unless explicitly targeted

A post was split to a new topic: How to handle short-lived infrastructure created to support a CI pipeline