@blhue Don't put it in the backend. I do a local in my main.tf like `data.aws_caller_identity.current.account_id == "000000000000" ? "Prod" : "Staging"` Obviously also adding `data "aws_caller_identity" "current" {}`.
I've also stopped using workspaces & primarily use S3 backend. I use an aliased command to configure the backend via: `terraform init -backend-config=\"bucket=\"my-bucket-$(aws sts get-caller-identity --query Account --output text)\"\" && terraform plan` so it's account specific.