anchor.diff: -# [START cloud_run_secure_services_backend]
  +# [START cloudrun_secure_services_backend]
   resource "google_cloud_run_service" "renderer" {
     provider = google-beta
     name     = "<%= ctx[:vars]['renderer'] %>"
  
positive.code:   role     = "roles/run.invoker"
    member   = "serviceAccount:${google_service_account.editor.email}"
  }
  # [END cloud_run_secure_services_backend_invoker_access]
  
  # [START cloud_run_secure_services_frontend_access]
  data "google_iam_policy" "noauth" {
    provider = google-beta
    binding {
  
negative.code: 
    policy_data = data.google_iam_policy.noauth.policy_data
  }
  # [END cloudrun_secure_services_frontend_access]
  
  output "backend_url" {
    value = google_cloud_run_service.renderer.status[0].url
  