In this post I’ll demonstrate how to configure a Terraform project to use Google Service Account impersonation and explain why I think this is a better option that using service account keys.