Ha ha - my post would not publish because genuine IaC conflicts with Google's policies, cheers.