See https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_instance#service_account