You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share...