anchor.diff:  # [START cloud_run_secure_services_backend]
   resource "google_cloud_run_service" "renderer" {
  +  provider = google-beta
     name     = "<%= ctx[:vars]['renderer'] %>"
     location = "us-central1"
     template {
  
positive.code: 
  # [START cloud_run_secure_services_frontend]
  resource "google_cloud_run_service" "editor" {
    name     = "<%= ctx[:vars]['editor'] %>"
    location = "us-central1"
    template {
  
negative.code: 
  # [START cloud_run_secure_services_backend_invoker_access]
  resource "google_cloud_run_service_iam_member" "editor_invokes_renderer" {
    provider = google-beta
    location = google_cloud_run_service.renderer.location
    service  = google_cloud_run_service.renderer.name
    role     = "roles/run.invoker"
  