Azure Tenent/Subscription per Workspace

[Joerg-L]

Not sure if that is the right location to ask but following situation:

Right now, we have one single Azure Tenant with multiple deployed environments in like

• Stage
• Prod
  and so on.

So Atlantis is running as a container and has following environment variables configured

• ARM_CLIENT_ID
• ARM_CLIENT_SECRET
• ARM_TENANT_ID
  everything works as expected as everything comes from one Terraform Workspace

If we now would like to move each environment into a own subscription/tenant, in conjuction with switch from default workspace in Terraform to environment-related workspaces, how would I go on with these three variables in Atlantis?

Would Custom Workflows the correct approach to define the environment variabels per Workspace?

thanks for your input
Joerg