hi @yoni cohen - that is pretty standard yes!
its definitely possible to establish distinct environments in one workspace (with naming + labels), but multiple workspaces will allow you to federate more granular access to resources + just separate things more cleanly