Trust and security with Google Cloud

Refer to the exhibit.
```
Error:
# gcloud compute instances create my-instance --zone us-central1-a
ERROR: (gcloud.compute.instances.create) Could not fetch resource:
 - Account 'my-service-account@project-id.iam.gserviceaccount.com' requires permission 'compute.instances.create' on project 'my-project'
```

Refer to the exhibit.

{
  "bindings": [
    {
      "role": "roles/storage.objectViewer",
      "members": [
        "user:alice@example.com",
        "user:bob@example.com"
      ]
    },
    {
      "role": "roles/storage.objectAdmin",
      "members": [
        "user:carol@example.com"
      ],
      "condition": {
        "title": "restrict_to_sensitive_bucket",
        "expression": "resource.name.startsWith('projects/_/buckets/sensitive-data/objects/')"
      }
    }
  ],
  "etag": "BwW3ZJf4G7A="
}