provider "google" { project = "my-project-id" region = "us-central1" credentials = *PATH TO SERVICE ACCOUNT KEY FILE* }