> For the complete documentation index, see [llms.txt](https://docs.teleskope.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.teleskope.ai/connectors/gcp/bigquery/terraform-scripts.md).

# Terraform Scripts

## Overview

Choose the deployment model that best fits your organization's needs:

### Option 1: Centralized Service Accounts

***Best for:** Organizations that prefer centralized identity management*

**Architecture**

* All service accounts are created in a single centralized project
* Each service account is granted permissions in its corresponding project
* One Workload identity pool shared across all projects

**Benefits**

* Centralized management and auditing
* Easier to track and manage all Teleskope service accounts

{% file src="/files/Zt9Qj2MbSw3IsZLFbZuj" %}

### Option 2: Per-Project Service Accounts

***Best for:** Organizations that prefer project-level isolation and want service accounts to reside in the same project where they're used*

**Architecture**

* Service Accounts are created in each project
* Workload Identity pools are created per project
* Each project has its own isolated identity configuration

**Benefits**

* Complete project-level isolation
* Service accounts live alongside the resources they access

{% file src="/files/AxouLxiDRcWq4AA85ToQ" %}