resource "google_service_account" "blc" { account_id = "${var.name}-${var.net}-${var.env}" display_name = "${var.name}-${var.net}-${var.env}" count = var.create_resources } resource "google_project_iam_member" "blc" { project = var.project role = "roles/editor" member = "serviceAccount:${google_service_account.blc[0].email}" count = var.create_resources }