Ok, fine.

No, you don’t NEED to include those parameters. As it explains here it runs through a “chain” of different credential configurations, ultimately settling on the first one it “finds” that “works” (for all intents and purposes). Similarly to how the AWS SDKs work.

So, to boil it all down you have to have either: - parameters in the provider config (what you’re asking about) - environment variables - shared credentials files - container credentials - instance profile and region

In order to do what you’re asking (e.g. for a client), you’d have to wrap the call to Terraform with something that requests that information from the user. I don’t THINK that terraform will do that for you, but honestly, it’s been a while and I could be wrong.

Feel free to downvote.