Cross posting from general: I want to share with you something extremely precious I have found out that can help a lot of people trying to use ephemeral project on GCP : https://github.com/terraform-google-modules/terraform-google-project-factory . Especially IAM wise, you will face a lot of challenges if you are not GCP Gurus. I am doing the same approach with Pulumi and it is working great. In particular this script helps a lot https://github.com/terraform-google-modules/terraform-google-project-factory/blob/master/helpers/setup-sa.sh