Google Cloud

#!/bin/bash

# Select the project
$ gcloud projects list

# GCP project where resources will be created assign the PROJECT_NAME to variable called IAM_PROJECT
$ IAM_PROJECT="<project-from-list>"
# The Google Service Account Name
$ IAM_SA_NAME="vm-instance-admin"

# Step 1: Create a Service Account
$ gcloud iam service-accounts create $IAM_SA_NAME \
            --display-name "Projects VM Instance Admin"

# Step 2: Create the Service Account Key

$ IAM_ACCOUNT="${IAM_SA_NAME}@${IAM_PROJECT}.iam.gserviceaccount.com"

$ gcloud iam service-accounts keys create \
            --iam-account $IAM_ACCOUNT \ gce-key.json

# Step 3: Grant VM instance Admin role

$ gcloud projects add-iam-policy-binding $IAM_PROJECT \
    --member serviceAccount:$IAM_ACCOUNT --role roles/compute.instanceAdmin.v1

$ gcloud projects add-iam-policy-binding $IAM_PROJECT \
    --member serviceAccount:$IAM_ACCOUNT --role roles/compute.networkAdmin

$ gcloud projects add-iam-policy-binding $IAM_PROJECT \
    --member serviceAccount:$IAM_ACCOUNT --role roles/compute.securityAdmin

$ gcloud projects add-iam-policy-binding $IAM_PROJECT \
    --member serviceAccount:$IAM_ACCOUNT --role roles/iam.serviceAccountUser