anchor.diff:  
   # [START cloud_run_secure_services_backend_identity]
   resource "google_service_account" "renderer" {
  +  provider     = google-beta
     account_id   = "renderer-identity"
     display_name = "Service identity of the Renderer (Backend) service."
   }
  
positive.code: 
  # [START cloud_run_secure_services_frontend_identity]
  resource "google_service_account" "editor" {
    account_id   = "editor-identity"
    display_name = "Service identity of the Editor (Frontend) service."
  }
  
negative.code: # [START cloud_run_secure_services_backend]
  resource "google_cloud_run_service" "renderer" {
    provider = google-beta
    name     = "<%= ctx[:vars]['renderer'] %>"
    location = "us-central1"
    template {
  