Example snippet that creates GCP custom service account using terraform google_service_account

cloudAccess.tf

resource "google_service_account" "custom" {
  account_id = "${var.app_name}"
  display_name = "Custom Service Account"
}

resource "google_project_iam_member" "secret-accessor-custom" {
  role = "roles/secretmanager.secretAccessor"
  member = "serviceAccount:${google_service_account.custom.email}"
}

resource "google_project_iam_member" "log-writer-custom" {
  role = "roles/logging.logWriter"
  member = "serviceAccount:${google_service_account.custom.email}"
}

resource "google_project_iam_member" "network-user-custom" {
  role = "roles/compute.networkUser"
  member = "serviceAccount:${google_service_account.custom.email}"
}

resource "google_project_iam_member" "dataflow-custom" {
  role = "roles/dataflow.worker"
  member = "serviceAccount:${google_service_account.custom.email}"
}

resource "google_project_iam_member" "composer-custom" {
  role = "roles/composer.worker"
  member = "serviceAccount:${google_service_account.custom.email}"
}

resource "google_project_iam_member" "dataproc-custom" {
  role = "roles/dataproc.worker"
  member = "serviceAccount:${google_service_account.custom.email}"
}