Service account for datadog

service_account-datadog.tf

# Service account for datadog
# c.f. https://docs.datadoghq.com/ja/integrations/google_cloud_platform/?tab=datadogussite#setup

resource "google_service_account" "datadog" {
  account_id   = "datadog"
  display_name = "datadog"
}

# Compute Viewer
resource "google_project_iam_binding" "datadog_compute_viewer" {
  role = "roles/compute.viewer"

  members = [
    "serviceAccount:${google_service_account.datadog.email}",
  ]
}

# Monitoring Viewer
resource "google_project_iam_binding" "datadog_monitoring_viewer" {
  role = "roles/monitoring.viewer"

  members = [
    "serviceAccount:${google_service_account.datadog.email}",
  ]
}

# Cloud Asset Viewer
resource "google_project_iam_binding" "datadog_cloudasset_viewer" {
  role = "roles/cloudasset.viewer"

  members = [
    "serviceAccount:${google_service_account.datadog.email}",
  ]
}