{ "output": { "user_instruction": { "value": "Successfully Configured !!\n\n What to do next ?\n\t1. Please download the file ${local_file.key.filename}\n\nUse the downloaded JSON file and Proceed at Prisma Cloud UI" } }, "provider": { "random": {}, "google": {} }, "resource": { "random_string": { "unique_id": { "special": false, "length": 5, "min_lower": 5 } }, "google_service_account": { "prisma_cloud_service_account": { "account_id": "prisma-cloud-serv-${random_string.unique_id.result}", "project": "${var.project_id}", "display_name": "Prisma Cloud Service Account" } }, "google_organization_iam_custom_role": { "prisma_cloud_organization_custom_role": { "role_id": "prismaCloudViewer${random_string.unique_id.result}", "org_id": "${var.org_id}", "permissions": "${var.org_iam_policy_custom_role_permissions}", "description": "This is a custom role created for Prisma Cloud. Contains granular additional permission which is not covered by built-in roles", "title": "Prisma Cloud Viewer ${random_string.unique_id.result}" } }, "google_service_account_key": { "prisma_cloud_service_account_key": { "service_account_id": "${google_service_account.prisma_cloud_service_account.name}" } }, "google_project_service": { "project_apis": { "service": "${var.project_services[count.index]}", "disable_on_destroy": false, "count": "${length(var.project_services)}", "project": "${var.project_id}" }, "org_onboarding_apis": { "service": "${var.org_services[count.index]}", "count": "${length(var.org_services)}", "project": "${var.project_id}" } }, "local_file": { "key": { "filename": "${var.project_id}-${random_string.unique_id.result}.json", "content": "${base64decode(google_service_account_key.prisma_cloud_service_account_key.private_key)}" } }, "google_organization_iam_member": { "bind_custom_role_to_org_iam_policy": { "role": "organizations/${var.org_id}/roles/${google_organization_iam_custom_role.prisma_cloud_organization_custom_role.role_id}", "org_id": "${var.org_id}", "member": "serviceAccount:${google_service_account.prisma_cloud_service_account.email}" }, "bind_managed_roles_to_org_iam_policy": { "role": "${var.org_iam_policy_managed_roles[count.index]}", "org_id": "${var.org_id}", "count": "${length(var.org_iam_policy_managed_roles)}", "member": "serviceAccount:${google_service_account.prisma_cloud_service_account.email}" } } }, "variable": { "project_id": { "type": "string" }, "org_id": { "default": "770038880827", "type": "string" }, "org_iam_policy_managed_roles": { "default": [ "roles/cloudfunctions.viewer", "roles/container.clusterViewer", "roles/iam.organizationRoleViewer", "roles/resourcemanager.folderViewer", "roles/storage.objectViewer", "roles/viewer" ], "type": "list" }, "org_iam_policy_custom_role_permissions": { "default": [ "analyticshub.dataExchanges.list", "autoscaling.sites.getIamPolicy", "autoscaling.sites.readRecommendations", "bigquery.bireservations.get", "bigquery.capacityCommitments.get", "bigquery.capacityCommitments.list", "bigquery.config.get", "bigquery.connections.get", "bigquery.connections.getIamPolicy", "bigquery.connections.list", "bigquery.dataPolicies.get", "bigquery.dataPolicies.getIamPolicy", "bigquery.dataPolicies.list", "bigquery.datasets.get", "bigquery.datasets.getIamPolicy", "bigquery.datasets.listTagBindings", "bigquery.jobs.get", "bigquery.jobs.list", "bigquery.jobs.listExecutionMetadata", "bigquery.models.getData", "bigquery.models.getMetadata", "bigquery.models.list", "bigquery.readsessions.getData", "bigquery.reservationAssignments.list", "bigquery.reservations.get", "bigquery.reservations.list", "bigquery.routines.get", "bigquery.routines.list", "bigquery.rowAccessPolicies.getIamPolicy", "bigquery.rowAccessPolicies.list", "bigquery.savedqueries.get", "bigquery.savedqueries.list", "bigquery.tables.get", "bigquery.tables.getIamPolicy", "bigquery.transfers.get", "clientauthconfig.clients.listWithSecrets", "cloudbuild.builds.get", "cloudbuild.builds.list", "clouddeploy.config.get", "clouddeploy.deliveryPipelines.getIamPolicy", "clouddeploy.deliveryPipelines.list", "clouddeploy.locations.list", "clouddeploy.targets.getIamPolicy", "clouddeploy.targets.list", "cloudfunctions.functions.get", "cloudfunctions.functions.getIamPolicy", "cloudfunctions.functions.list", "cloudfunctions.locations.get", "cloudfunctions.locations.list", "cloudfunctions.operations.get", "cloudfunctions.operations.list", "cloudfunctions.runtimes.list", "cloudkms.cryptoKeyVersions.get", "cloudkms.cryptoKeyVersions.list", "cloudkms.cryptoKeys.get", "cloudkms.cryptoKeys.getIamPolicy", "cloudkms.cryptoKeys.list", "cloudkms.ekmConnections.get", "cloudkms.ekmConnections.getIamPolicy", "cloudkms.ekmConnections.list", "cloudkms.importJobs.get", "cloudkms.importJobs.getIamPolicy", "cloudkms.importJobs.list", "cloudkms.keyRings.get", "cloudkms.keyRings.getIamPolicy", "cloudkms.keyRings.list", "cloudkms.keyRings.listEffectiveTags", "cloudkms.keyRings.listTagBindings", "cloudkms.locations.generateRandomBytes", "cloudkms.locations.get", "cloudkms.locations.list", "cloudscheduler.jobs.get", "cloudscheduler.jobs.list", "cloudscheduler.locations.get", "cloudscheduler.locations.list", "cloudsecurityscanner.scans.list", "cloudsql.backupRuns.get", "cloudsql.backupRuns.list", "cloudsql.databases.get", "cloudsql.databases.list", "cloudsql.instances.get", "cloudsql.instances.list", "cloudsql.instances.listEffectiveTags", "cloudsql.instances.listServerCas", "cloudsql.instances.listTagBindings", "cloudsql.sslCerts.get", "cloudsql.sslCerts.list", "cloudsql.users.get", "cloudsql.users.list", "compute.acceleratorTypes.get", "compute.acceleratorTypes.list", "compute.addresses.get", "compute.addresses.list", "compute.autoscalers.get", "compute.autoscalers.list", "compute.backendBuckets.get", "compute.backendBuckets.getIamPolicy", "compute.backendBuckets.list", "compute.backendServices.get", "compute.backendServices.getIamPolicy", "compute.backendServices.list", "compute.commitments.get", "compute.commitments.list", "compute.diskTypes.get", "compute.diskTypes.list", "compute.disks.create", "compute.disks.createSnapshot", "compute.disks.get", "compute.disks.getIamPolicy", "compute.disks.list", "compute.disks.listEffectiveTags", "compute.disks.listTagBindings", "compute.disks.useReadOnly", "compute.externalVpnGateways.get", "compute.externalVpnGateways.list", "compute.firewallPolicies.get", "compute.firewallPolicies.getIamPolicy", "compute.firewallPolicies.list", "compute.firewalls.get", "compute.firewalls.list", "compute.forwardingRules.get", "compute.forwardingRules.list", "compute.globalAddresses.get", "compute.globalAddresses.list", "compute.globalForwardingRules.get", "compute.globalForwardingRules.list", "compute.globalForwardingRules.pscGet", "compute.globalNetworkEndpointGroups.get", "compute.globalNetworkEndpointGroups.list", "compute.globalOperations.get", "compute.globalOperations.getIamPolicy", "compute.globalOperations.list", "compute.globalPublicDelegatedPrefixes.get", "compute.globalPublicDelegatedPrefixes.list", "compute.healthChecks.get", "compute.healthChecks.list", "compute.healthChecks.useReadOnly", "compute.httpHealthChecks.get", "compute.httpHealthChecks.list", "compute.httpHealthChecks.useReadOnly", "compute.httpsHealthChecks.get", "compute.httpsHealthChecks.list", "compute.httpsHealthChecks.useReadOnly", "compute.images.get", "compute.images.getFromFamily", "compute.images.getIamPolicy", "compute.images.list", "compute.images.listEffectiveTags", "compute.images.listTagBindings", "compute.images.useReadOnly", "compute.instanceGroupManagers.get", "compute.instanceGroupManagers.list", "compute.instanceGroups.get", "compute.instanceGroups.list", "compute.instanceTemplates.get", "compute.instanceTemplates.getIamPolicy", "compute.instanceTemplates.list", "compute.instanceTemplates.useReadOnly", "compute.instances.create", "compute.instances.delete", "compute.instances.get", "compute.instances.getEffectiveFirewalls", "compute.instances.getGuestAttributes", "compute.instances.getIamPolicy", "compute.instances.getScreenshot", "compute.instances.getSerialPortOutput", "compute.instances.getShieldedInstanceIdentity", "compute.instances.getShieldedVmIdentity", "compute.instances.list", "compute.instances.listEffectiveTags", "compute.instances.listReferrers", "compute.instances.listTagBindings", "compute.instances.setLabels", "compute.instances.setMetadata", "compute.instances.useReadOnly", "compute.interconnectAttachments.get", "compute.interconnectAttachments.list", "compute.interconnectLocations.get", "compute.interconnectLocations.list", "compute.interconnects.get", "compute.interconnects.list", "compute.licenseCodes.get", "compute.licenseCodes.getIamPolicy", "compute.licenseCodes.list", "compute.licenses.get", "compute.licenses.getIamPolicy", "compute.licenses.list", "compute.machineImages.get", "compute.machineImages.getIamPolicy", "compute.machineImages.list", "compute.machineImages.useReadOnly", "compute.machineTypes.get", "compute.machineTypes.list", "compute.maintenancePolicies.get", "compute.maintenancePolicies.getIamPolicy", "compute.maintenancePolicies.list", "compute.networkAttachments.get", "compute.networkAttachments.list", "compute.networkEdgeSecurityServices.get", "compute.networkEdgeSecurityServices.list", "compute.networkEndpointGroups.get", "compute.networkEndpointGroups.getIamPolicy", "compute.networkEndpointGroups.list", "compute.networks.create", "compute.networks.delete", "compute.networks.get", "compute.networks.getEffectiveFirewalls", "compute.networks.getRegionEffectiveFirewalls", "compute.networks.list", "compute.networks.listPeeringRoutes", "compute.networks.updatePolicy", "compute.networks.use", "compute.networks.useExternalIp", "compute.nodeGroups.get", "compute.nodeGroups.getIamPolicy", "compute.nodeGroups.list", "compute.nodeTemplates.get", "compute.nodeTemplates.getIamPolicy", "compute.nodeTemplates.list", "compute.nodeTypes.get", "compute.nodeTypes.list", "compute.organizations.listAssociations", "compute.packetMirrorings.get", "compute.packetMirrorings.list", "compute.projects.get", "compute.publicAdvertisedPrefixes.get", "compute.publicAdvertisedPrefixes.list", "compute.publicDelegatedPrefixes.get", "compute.publicDelegatedPrefixes.list", "compute.regionBackendServices.get", "compute.regionBackendServices.getIamPolicy", "compute.regionBackendServices.list", "compute.regionFirewallPolicies.get", "compute.regionFirewallPolicies.getIamPolicy", "compute.regionFirewallPolicies.list", "compute.regionHealthCheckServices.get", "compute.regionHealthCheckServices.list", "compute.regionHealthChecks.get", "compute.regionHealthChecks.list", "compute.regionHealthChecks.useReadOnly", "compute.regionNetworkEndpointGroups.get", "compute.regionNetworkEndpointGroups.list", "compute.regionNotificationEndpoints.get", "compute.regionNotificationEndpoints.list", "compute.regionOperations.get", "compute.regionOperations.getIamPolicy", "compute.regionOperations.list", "compute.regionSecurityPolicies.get", "compute.regionSecurityPolicies.list", "compute.regionSslCertificates.get", "compute.regionSslCertificates.list", "compute.regionSslPolicies.get", "compute.regionSslPolicies.list", "compute.regionSslPolicies.listAvailableFeatures", "compute.regionTargetHttpProxies.get", "compute.regionTargetHttpProxies.list", "compute.regionTargetHttpsProxies.get", "compute.regionTargetHttpsProxies.list", "compute.regionTargetTcpProxies.get", "compute.regionTargetTcpProxies.list", "compute.regionUrlMaps.get", "compute.regionUrlMaps.list", "compute.regions.get", "compute.regions.list", "compute.reservations.get", "compute.reservations.list", "compute.resourcePolicies.get", "compute.resourcePolicies.getIamPolicy", "compute.resourcePolicies.list", "compute.routers.get", "compute.routers.list", "compute.routes.get", "compute.routes.list", "compute.securityPolicies.get", "compute.securityPolicies.getIamPolicy", "compute.securityPolicies.list", "compute.serviceAttachments.get", "compute.serviceAttachments.getIamPolicy", "compute.serviceAttachments.list", "compute.snapshots.create", "compute.snapshots.delete", "compute.snapshots.get", "compute.snapshots.getIamPolicy", "compute.snapshots.list", "compute.snapshots.listEffectiveTags", "compute.snapshots.listTagBindings", "compute.snapshots.setLabels", "compute.snapshots.useReadOnly", "compute.sslCertificates.get", "compute.sslCertificates.list", "compute.sslPolicies.get", "compute.sslPolicies.list", "compute.sslPolicies.listAvailableFeatures", "compute.subnetworks.create", "compute.subnetworks.delete", "compute.subnetworks.get", "compute.subnetworks.getIamPolicy", "compute.subnetworks.list", "compute.subnetworks.use", "compute.subnetworks.useExternalIp", "compute.targetGrpcProxies.get", "compute.targetGrpcProxies.list", "compute.targetHttpProxies.get", "compute.targetHttpProxies.list", "compute.targetHttpsProxies.get", "compute.targetHttpsProxies.list", "compute.targetInstances.get", "compute.targetInstances.list", "compute.targetPools.get", "compute.targetPools.list", "compute.targetSslProxies.get", "compute.targetSslProxies.list", "compute.targetTcpProxies.get", "compute.targetTcpProxies.list", "compute.targetVpnGateways.get", "compute.targetVpnGateways.list", "compute.urlMaps.get", "compute.urlMaps.list", "compute.vpnGateways.get", "compute.vpnGateways.list", "compute.vpnTunnels.get", "compute.vpnTunnels.list", "compute.zoneOperations.get", "compute.zoneOperations.getIamPolicy", "compute.zoneOperations.list", "compute.zones.get", "compute.zones.list", "container.apiServices.get", "container.apiServices.getStatus", "container.apiServices.list", "container.auditSinks.get", "container.auditSinks.list", "container.backendConfigs.get", "container.backendConfigs.list", "container.bindings.get", "container.bindings.list", "container.certificateSigningRequests.get", "container.certificateSigningRequests.getStatus", "container.certificateSigningRequests.list", "container.clusterRoleBindings.get", "container.clusterRoleBindings.list", "container.clusterRoles.get", "container.clusterRoles.list", "container.clusters.get", "container.clusters.list", "container.clusters.listEffectiveTags", "container.clusters.listTagBindings", "container.componentStatuses.get", "container.componentStatuses.list", "container.configMaps.get", "container.configMaps.list", "container.controllerRevisions.get", "container.controllerRevisions.list", "container.cronJobs.get", "container.cronJobs.getStatus", "container.cronJobs.list", "container.csiDrivers.get", "container.csiDrivers.list", "container.csiNodeInfos.get", "container.csiNodeInfos.list", "container.csiNodes.get", "container.csiNodes.list", "container.customResourceDefinitions.get", "container.customResourceDefinitions.getStatus", "container.customResourceDefinitions.list", "container.daemonSets.get", "container.daemonSets.getStatus", "container.daemonSets.list", "container.deployments.get", "container.deployments.getStatus", "container.deployments.list", "container.endpointSlices.get", "container.endpointSlices.list", "container.endpoints.get", "container.endpoints.list", "container.events.get", "container.events.list", "container.frontendConfigs.get", "container.frontendConfigs.list", "container.horizontalPodAutoscalers.get", "container.horizontalPodAutoscalers.getStatus", "container.horizontalPodAutoscalers.list", "container.ingresses.get", "container.ingresses.getStatus", "container.ingresses.list", "container.initializerConfigurations.get", "container.initializerConfigurations.list", "container.jobs.get", "container.jobs.getStatus", "container.jobs.list", "container.leases.get", "container.leases.list", "container.limitRanges.get", "container.limitRanges.list", "container.localSubjectAccessReviews.list", "container.managedCertificates.get", "container.managedCertificates.list", "container.mutatingWebhookConfigurations.get", "container.mutatingWebhookConfigurations.list", "container.namespaces.get", "container.namespaces.getStatus", "container.namespaces.list", "container.networkPolicies.get", "container.networkPolicies.list", "container.nodes.get", "container.nodes.getStatus", "container.nodes.list", "container.operations.get", "container.operations.list", "container.persistentVolumeClaims.get", "container.persistentVolumeClaims.getStatus", "container.persistentVolumeClaims.list", "container.persistentVolumes.get", "container.persistentVolumes.getStatus", "container.persistentVolumes.list", "container.petSets.get", "container.petSets.list", "container.podDisruptionBudgets.get", "container.podDisruptionBudgets.getStatus", "container.podDisruptionBudgets.list", "container.podPresets.get", "container.podPresets.list", "container.podSecurityPolicies.get", "container.podSecurityPolicies.list", "container.podTemplates.get", "container.podTemplates.list", "container.pods.get", "container.pods.getLogs", "container.pods.getStatus", "container.pods.list", "container.priorityClasses.get", "container.priorityClasses.list", "container.replicaSets.get", "container.replicaSets.getScale", "container.replicaSets.getStatus", "container.replicaSets.list", "container.replicationControllers.get", "container.replicationControllers.getScale", "container.replicationControllers.getStatus", "container.replicationControllers.list", "container.resourceQuotas.get", "container.resourceQuotas.getStatus", "container.resourceQuotas.list", "container.roleBindings.get", "container.roleBindings.list", "container.roles.get", "container.roles.list", "container.runtimeClasses.get", "container.runtimeClasses.list", "container.scheduledJobs.get", "container.scheduledJobs.list", "container.selfSubjectAccessReviews.list", "container.serviceAccounts.get", "container.serviceAccounts.list", "container.services.get", "container.services.getStatus", "container.services.list", "container.statefulSets.get", "container.statefulSets.getScale", "container.statefulSets.getStatus", "container.statefulSets.list", "container.storageClasses.get", "container.storageClasses.list", "container.storageStates.get", "container.storageStates.getStatus", "container.storageStates.list", "container.storageVersionMigrations.get", "container.storageVersionMigrations.getStatus", "container.storageVersionMigrations.list", "container.subjectAccessReviews.list", "container.thirdPartyObjects.get", "container.thirdPartyObjects.list", "container.thirdPartyResources.get", "container.thirdPartyResources.list", "container.updateInfos.get", "container.updateInfos.list", "container.validatingWebhookConfigurations.get", "container.validatingWebhookConfigurations.list", "container.volumeAttachments.get", "container.volumeAttachments.getStatus", "container.volumeAttachments.list", "container.volumeSnapshotClasses.get", "container.volumeSnapshotClasses.list", "container.volumeSnapshotContents.get", "container.volumeSnapshotContents.getStatus", "container.volumeSnapshotContents.list", "container.volumeSnapshots.get", "container.volumeSnapshots.getStatus", "container.volumeSnapshots.list", "dataproc.agents.get", "dataproc.agents.list", "dataproc.autoscalingPolicies.get", "dataproc.autoscalingPolicies.getIamPolicy", "dataproc.autoscalingPolicies.list", "dataproc.batches.get", "dataproc.batches.list", "dataproc.clusters.get", "dataproc.clusters.getIamPolicy", "dataproc.clusters.list", "dataproc.jobs.get", "dataproc.jobs.getIamPolicy", "dataproc.jobs.list", "dataproc.operations.get", "dataproc.operations.getIamPolicy", "dataproc.operations.list", "dataproc.tasks.listInvalidatedLeases", "dataproc.workflowTemplates.get", "dataproc.workflowTemplates.getIamPolicy", "dataproc.workflowTemplates.list", "dataprocessing.datasources.get", "dataprocessing.datasources.list", "dataprocessing.featurecontrols.list", "dataprocessing.groupcontrols.get", "dataprocessing.groupcontrols.list", "deploymentmanager.deployments.getIamPolicy", "dns.changes.get", "dns.changes.list", "dns.dnsKeys.get", "dns.dnsKeys.list", "dns.managedZoneOperations.get", "dns.managedZoneOperations.list", "dns.managedZones.get", "dns.managedZones.getIamPolicy", "dns.managedZones.list", "dns.policies.get", "dns.policies.getIamPolicy", "dns.policies.list", "dns.projects.get", "dns.resourceRecordSets.get", "dns.resourceRecordSets.list", "dns.responsePolicies.get", "dns.responsePolicies.list", "dns.responsePolicyRules.get", "dns.responsePolicyRules.list", "eventarc.channelConnections.get", "eventarc.channelConnections.getIamPolicy", "eventarc.channelConnections.list", "eventarc.channels.get", "eventarc.channels.getIamPolicy", "eventarc.channels.list", "eventarc.googleChannelConfigs.get", "eventarc.locations.get", "eventarc.locations.list", "eventarc.operations.get", "eventarc.operations.list", "eventarc.providers.get", "eventarc.providers.list", "eventarc.triggers.get", "eventarc.triggers.getIamPolicy", "eventarc.triggers.list", "firebaserules.rulesets.get", "iam.denypolicies.get", "iam.denypolicies.list", "iam.googleapis.com/workforcePoolProviders.get", "iam.googleapis.com/workforcePoolProviders.list", "iam.googleapis.com/workforcePools.get", "iam.googleapis.com/workforcePools.getIamPolicy", "iam.googleapis.com/workforcePools.list", "iam.googleapis.com/workloadIdentityPoolProviders.get", "iam.googleapis.com/workloadIdentityPoolProviders.list", "iam.googleapis.com/workloadIdentityPools.get", "iam.googleapis.com/workloadIdentityPools.list", "iam.roles.get", "iam.roles.list", "iam.serviceAccountKeys.get", "iam.serviceAccountKeys.list", "iam.serviceAccounts.get", "iam.serviceAccounts.getIamPolicy", "iam.serviceAccounts.list", "logging.buckets.get", "logging.buckets.list", "logging.cmekSettings.get", "logging.exclusions.get", "logging.exclusions.list", "logging.links.get", "logging.links.list", "logging.locations.get", "logging.locations.list", "logging.logEntries.list", "logging.logMetrics.get", "logging.logMetrics.list", "logging.logServiceIndexes.list", "logging.logServices.list", "logging.logs.list", "logging.notificationRules.get", "logging.notificationRules.list", "logging.operations.get", "logging.operations.list", "logging.queries.get", "logging.queries.list", "logging.queries.listShared", "logging.sinks.get", "logging.sinks.list", "logging.usage.get", "logging.views.access", "logging.views.get", "logging.views.list", "logging.views.listLogs", "logging.views.listResourceKeys", "logging.views.listResourceValues", "monitoring.alertPolicies.get", "monitoring.alertPolicies.list", "monitoring.dashboards.get", "monitoring.dashboards.list", "monitoring.groups.get", "monitoring.groups.list", "monitoring.metricDescriptors.get", "monitoring.metricDescriptors.list", "monitoring.monitoredResourceDescriptors.get", "monitoring.monitoredResourceDescriptors.list", "monitoring.notificationChannelDescriptors.get", "monitoring.notificationChannelDescriptors.list", "monitoring.notificationChannels.get", "monitoring.notificationChannels.list", "monitoring.publicWidgets.get", "monitoring.publicWidgets.list", "monitoring.services.get", "monitoring.services.list", "monitoring.slos.get", "monitoring.slos.list", "monitoring.timeSeries.list", "monitoring.uptimeCheckConfigs.get", "monitoring.uptimeCheckConfigs.list", "pubsub.schemas.get", "pubsub.schemas.getIamPolicy", "pubsub.schemas.list", "pubsub.snapshots.get", "pubsub.snapshots.list", "pubsub.snapshots.seek", "pubsub.subscriptions.get", "pubsub.subscriptions.getIamPolicy", "pubsub.subscriptions.list", "pubsub.topics.get", "pubsub.topics.getIamPolicy", "pubsub.topics.list", "recommender.locations.get", "recommender.locations.list", "recommender.runServiceIdentityInsights.get", "recommender.runServiceIdentityInsights.list", "recommender.runServiceIdentityRecommendations.get", "recommender.runServiceIdentityRecommendations.list", "recommender.runServiceSecurityInsights.get", "recommender.runServiceSecurityInsights.list", "recommender.runServiceSecurityRecommendations.get", "recommender.runServiceSecurityRecommendations.list", "redis.instances.get", "redis.instances.list", "redis.locations.get", "redis.locations.list", "redis.operations.get", "redis.operations.list", "remotebuildexecution.blobs.get", "resourcemanager.folders.getIamPolicy", "resourcemanager.hierarchyNodes.listEffectiveTags", "resourcemanager.hierarchyNodes.listTagBindings", "resourcemanager.projects.get", "resourcemanager.projects.getIamPolicy", "resourcemanager.projects.list", "resourcemanager.tagHolds.list", "resourcemanager.tagKeys.get", "resourcemanager.tagKeys.getIamPolicy", "resourcemanager.tagKeys.list", "resourcemanager.tagValues.get", "resourcemanager.tagValues.getIamPolicy", "resourcemanager.tagValues.list", "run.configurations.get", "run.configurations.list", "run.executions.get", "run.executions.list", "run.jobs.get", "run.jobs.getIamPolicy", "run.jobs.list", "run.locations.list", "run.operations.get", "run.operations.list", "run.revisions.get", "run.revisions.list", "run.routes.get", "run.routes.list", "run.services.get", "run.services.getIamPolicy", "run.services.list", "run.services.listEffectiveTags", "run.services.listTagBindings", "run.tasks.get", "run.tasks.list", "serviceusage.quotas.get", "serviceusage.services.get", "serviceusage.services.list", "serviceusage.services.use", "storage.buckets.get", "storage.buckets.getIamPolicy", "storage.buckets.list", "storage.buckets.listEffectiveTags", "storage.buckets.listTagBindings", "storage.hmacKeys.get", "storage.hmacKeys.list", "storage.objects.get", "storage.objects.list" ], "type": "list" }, "org_services": { "default": [ "accesscontextmanager.googleapis.com" ], "type": "list" }, "project_services": { "default": [ "accessapproval.googleapis.com", "aiplatform.googleapis.com", "alloydb.googleapis.com", "analyticshub.googleapis.com", "apigateway.googleapis.com", "apigee.googleapis.com", "apikeys.googleapis.com", "appengine.googleapis.com", "artifactregistry.googleapis.com", "bigquery.googleapis.com", "bigtableadmin.googleapis.com", "binaryauthorization.googleapis.com", "certificatemanager.googleapis.com", "cloudasset.googleapis.com", "cloudbilling.googleapis.com", "cloudbuild.googleapis.com", "clouddeploy.googleapis.com", "cloudfunctions.googleapis.com", "cloudkms.googleapis.com", "cloudresourcemanager.googleapis.com", "cloudtasks.googleapis.com", "composer.googleapis.com", "compute.googleapis.com", "container.googleapis.com", "containeranalysis.googleapis.com", "datacatalog.googleapis.com", "datafusion.googleapis.com", "datamigration.googleapis.com", "dataplex.googleapis.com", "dataproc.googleapis.com", "datastore.googleapis.com", "datastream.googleapis.com", "deploymentmanager.googleapis.com", "dlp.googleapis.com", "dns.googleapis.com", "essentialcontacts.googleapis.com", "file.googleapis.com", "firebaseappdistribution.googleapis.com", "firebaseremoteconfig.googleapis.com", "firebaserules.googleapis.com", "firestore.googleapis.com", "gkehub.googleapis.com", "healthcare.googleapis.com", "iam.googleapis.com", "iap.googleapis.com", "identitytoolkit.googleapis.com", "logging.googleapis.com", "managedidentities.googleapis.com", "memcache.googleapis.com", "metastore.googleapis.com", "ml.googleapis.com", "monitoring.googleapis.com", "networkconnectivity.googleapis.com", "networksecurity.googleapis.com", "networkservices.googleapis.com", "notebooks.googleapis.com", "orgpolicy.googleapis.com", "privateca.googleapis.com", "pubsub.googleapis.com", "recommender.googleapis.com", "redis.googleapis.com", "run.googleapis.com", "secretmanager.googleapis.com", "securitycenter.googleapis.com", "servicedirectory.googleapis.com", "serviceusage.googleapis.com", "sourcerepo.googleapis.com", "spanner.googleapis.com", "speech.googleapis.com", "sql-component.googleapis.com", "storage-component.googleapis.com", "translate.googleapis.com", "vmwareengine.googleapis.com", "vpcaccess.googleapis.com", "websecurityscanner.googleapis.com", "workflows.googleapis.com" ], "type": "list" } }, "terraform": { "required_providers": { "random": "~> 3.1", "google-beta": "~> 3.90", "google": "~> 3.90" } } }