Is there anyway to restrict Prefect cloud account by API keys. Basically I am trying to find the easy way to deploy code to prod and non-prod env by API keys such that one env API key cannot access another.

The Organization plan's service accounts might be what you're looking for? https://docs.prefect.io/ui/service-accounts/

Thank you I will take a look at it.