google-destination-bucket-terraform.tf

# ------- artifacts --------
resource "google_storage_bucket" "artifacts-<your source google project id>-backup" {
  name          = "artifacts-<your source google project id>-backup"
  project       = "<your google backup project number>"
  location      = "EUROPE-WEST4"
  storage_class = "STANDARD"
  force_destroy = false

  versioning {
    enabled = true
  }

  lifecycle_rule {
    condition {
      age = "90"
      with_state = "ARCHIVED"
    }
    action {
      type = "Delete"
    }
  }
}

resource "google_storage_bucket_iam_member" "artifacts-<your source google project id>-backup-objectAdmin" {
  bucket     = google_storage_bucket.artifacts-<your source google project id>-backup.name
  role       = "roles/storage.objectAdmin"
  member     = "serviceAccount:${data.google_storage_transfer_project_service_account.default.email}"
  depends_on = [google_storage_bucket.artifacts-<your source google project id>-backup]
}

resource "google_storage_bucket_iam_member" "artifacts-<your source google project id>-backup-legacyBucketReader" {
  bucket     = google_storage_bucket.artifacts-<your source google project id>-backup.name
  role       = "roles/storage.legacyBucketReader"
  member     = "serviceAccount:${data.google_storage_transfer_project_service_account.default.email}"
  depends_on = [google_storage_bucket.artifacts-<your source google project id>-backup]
}