Configure Data Access Audit Log with Terraform

google_project_iam_config.tf

resource "google_project_iam_audit_config" "all-services" {
  project = "<your project>"
  service = "allServices"
  audit_log_config {
    log_type = "ADMIN_READ"
  }
  audit_log_config {
    log_type = "DATA_READ"
  }
  audit_log_config {
    log_type = "DATA_WRITE"
  }
}