Add an example for creating a cloud resource connection

Author: pratikmore0290

bigquery/bigquery_create_connection_cloud_resource/main.tf

@@ -14,13 +14,26 @@
 * limitations under the License.
 */
 
+# [START bigquery_create_connection_cloud_resource_iam]
 # [START bigquery_create_connection_cloud_resource]
-## This creates a cloud resource connection.
-## Note: The cloud resource nested object has only one output field - serviceAccountId.
-resource "google_bigquery_connection" "connection" {
+
+# This queries the provider for project information.
+data "google_project" "default" {}
+
+# This creates a cloud resource connection in the US region named my_cloud_resource_connection.
+# Note: The cloud resource nested object has only one output field - serviceAccountId.
+resource "google_bigquery_connection" "default" {
   connection_id = "my_cloud_resource_connection"
-  project       = "myproject1-381000"
+  project       = data.google_project.default.project_id
   location      = "US"
   cloud_resource {}
 }
 # [END bigquery_create_connection_cloud_resource]
+
+## This grants IAM role access to the service account of the connection created in the previous step.
+resource "google_project_iam_member" "connectionPermissionGrant" {
+  project = data.google_project.default.project_id
+  role    = "roles/storage.objectViewer"
+  member  = "serviceAccount:${google_bigquery_connection.default.cloud_resource[0].service_account_id}"
+}
+# [END bigquery_create_connection_cloud_resource_iam]