Great writeup. I'm trying to follow it. It would be helpful to be able to follow through your "Step 1" instructions as if I've never touched Google Cloud before (because I haven't). Writing up how to create a Terraform Service account would be awesome.

For anyone else who's a bit confused, maybe Google's reference on understanding roles will help: https://cloud.google.com/iam/docs/understanding-roles