diff --git a/dns_zones.tf b/dns_zones.tf
index c4585c4..507a30b 100644
--- a/dns_zones.tf
+++ b/dns_zones.tf
@@ -27,6 +27,13 @@ provider "aws" {
   }
 }
 
+provider "aws" {
+  alias = "self"
+  assume_role {
+    role_arn     = format("arn:%v:iam::%v:role/r-inf-terraform", data.aws_arn.current.partition, var.account_id)
+    session_name = var.os_username
+  }
+}
 #---
 # dummy vpc, so we can associate the zone to this account
 #---