Is it possible to get a google managed service account? I want to add a role to a pub/sub service account but I get a 404 that the SA does not exists:

const pubSubPushAuth = new gcp.serviceAccount.IAMBinding('pub-sub-push-auth', {
  members: [
    `serviceAccount:<mailto:service-${gcpProjectNumber}@gcp-sa-pubsub.iam.gserviceaccount.com|service-${gcpProjectNumber}@gcp-sa-pubsub.iam.gserviceaccount.com>`,
  ],
  role: 'roles/iam.serviceAccountTokenCreator',
  serviceAccountId: `<mailto:projects/${gcp.config.project}/serviceAccounts/service-${gcpProjectNumber}@gcp-sa-pubsub.iam.gserviceaccount.com|projects/${gcp.config.project}/serviceAccounts/service-${gcpProjectNumber}@gcp-sa-pubsub.iam.gserviceaccount.com>`,
});

Service accounts are resources that you can create using Pulumi: https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/gcp/serviceaccount/#Account