[A-00157]TerraformでIAMロール、ServiceAccountを作成する

Google Cloud上にTerraformを使ってIAMロール,ServiceAccountを作成する方法を記載しておく

・Terraformソース

# Service Account
resource "google_service_account" "default" {
    project = "<project_id>"
    account_id = "terraform-demo"
    display_name = "Terraform Demo"
}

# IAM Role
resource "google_project_iam_member" "prjiam" {
    project = "<project_id>"
    role = "roles/iap.tunnelResourceAccessor"
    member = "serviceAccount:${google_service_account.default.email}"
}

・Appendix

参考文献はこちら