I have downloaded the GCP service account key to my local system. In Terraform, I have set the GOOGLE_APPLICATION_CREDENTIALS as a path to this file in the startup-script part of my bastion instance. Below is a snippet: variable "credentials"{ default="C:/GCP/service-account-key.json" } metadata= { startup-script=<