anchor.diff:    service     = google_cloud_run_service.default.name
   
     policy_data = data.google_iam_policy.noauth.policy_data
  -}+}
  +# [END cloudrun_service_noauth_iam]
  
positive.code:     }
    }
  }
  
  data "google_iam_policy" "noauth" {
    binding {
      role = "roles/run.invoker"
  
negative.code: # Example of how to deploy a publicly-accessible Cloud Run application
  
  # [START cloudrun_service_noauth]
  resource "google_cloud_run_service" "<%= ctx[:primary_resource_id] %>" {
    name     = "<%= ctx[:vars]['cloud_run_service_name'] %>"
    location = "us-central1"
  