https://docs.last9.io/docs/create-gcp-service-account-with-read-only-access