anchor.diff:  # [START cloud_run_secure_services_backend]
   resource "google_cloud_run_service" "renderer" {
  +  provider = google-beta
     name     = "<%= ctx[:vars]['renderer'] %>"
     location = "us-central1"
     template {
  
positive.code: 
  # [START cloud_run_secure_services_frontend_access]
  data "google_iam_policy" "noauth" {
    binding {
      role = "roles/run.invoker"
      members = [
  
negative.code: 
  # [START cloud_run_secure_services_backend_identity]
  resource "google_service_account" "renderer" {
    provider     = google-beta
    account_id   = "renderer-identity"
    display_name = "Service identity of the Renderer (Backend) service."
  }
  