The module as a whole does not naturally depend on the google_service_account, only the resources within the module which use the service_account_email value do. When you add depends_on to the module block though, you are declaring that everything within that module depends on all changes to google_service_account.temporal_service_account.