Disabled connection from lower environment to production environment

Hi All,

We want to restrict/disable connections to production environment from any lower environment like UAT, development or test etc.

There are some users who have access on all the servers and sometime they connect production SQL instance from SSMS UAT environment. (We want to restrict this)

Similarly, when some users connect production AOS from UAT environment. (We want to restrict this as well)

Is there any way to disable or restrict these connections?

We have used same port for AOS and SQL on all environments.