You need to configure the provider to assume a role - are you familiar with how Terraform does this?