terraform {

required_providers {

google = {

source = "hashicorp/google"

}

}

}

resource "google_project_service" "iam" {

service = "iam.googleapis.com"

project = var.inputs.project_id

count = var.inputs.should_enable_apis_on_apply ? 1 : 0

disable_on_destroy = var.inputs.should_disable_apis_on_destroy

}

resource "random_id" "id" {

byte_length = 3

}

locals {

service_account_id = lower("service-account-id-${random_id.id.hex}")

}

resource "google_service_account" "service_account" {

account_id = local.service_account_id

display_name = "Service Account"

depends_on = [google_project_service.iam]

}