Configure Terraform to use the aws provider with multiple assume_role aliases for cross-account deployments in a single root module

Steps

1. Define a default provider block for the management account and additional alias blocks: provider "aws" { alias = "staging"; assume_role { role_arn = "arn:aws:iam::<staging-account-id>:role/TerraformRole" } }
2. Pass the aliased provider to resources or child modules explicitly: resource "aws_s3_bucket" "staging" { provider = aws.staging ... }
3. For child modules, declare a required_providers block with configuration_aliases to receive the aliased provider: required_providers { aws = { source = "hashicorp/aws"; configuration_aliases = [aws.staging] } }
4. Pass the alias into the module call: module "network" { source = "./modules/network"; providers = { aws = aws.staging } }
5. Set session_name in the assume_role block for CloudTrail auditability: assume_role { role_arn = "..."; session_name = "terraform-ci" }
6. Run terraform plan and confirm resource addresses reference the correct provider by checking the Provider column in plan output or terraform providers