anchor.diff:  
   # Give default Compute service account eventarc.eventReceiver role
   resource "google_project_iam_binding" "project" {
  +  provider = google-beta
     project = data.google_project.project.id
     role    = "roles/eventarc.eventReceiver"
   
  
positive.code: # [START eventarc_terraform_enableapis]
  # Used to retrieve project_number later
  data "google_project" "project" {
  }
          
  # Enable Cloud Run API
  resource "google_project_service" "run" {
    service            = "run.googleapis.com"
    disable_on_destroy = false
  }
      
  # Enable Eventarc API
  resource "google_project_service" "eventarc" {
    service            = "eventarc.googleapis.com"
    disable_on_destroy = false
  }
  
negative.code:       
  # Make Cloud Run service publicly accessible
  resource "google_cloud_run_service_iam_member" "allUsers" {
    provider = google-beta
    service  = google_cloud_run_service.default.name
    location = google_cloud_run_service.default.location
    role     = "roles/run.invoker"
  