do we have a mechanism to apply a provider over an entire group of resources, or do we have to specify for each resource each time?