Ensure sharing of service account credentials is restricted using Google Service Account

IAM roles and Service Accounts have different functions and therefore it is best practice to prevent IAM users from sharing Service Account credentials. For more information on how to use Service Accounts and Service Account Roles, see the GCP documentation.
References:
https://cloud.google.com/iam/docs/service-accounts

In GCP Console -

1. Log into the GCP Console and go to IAM.
2. Under Service Accounts, select the pencil icon next to the entry you wish to edit.
3. After editing the permissions as needed, select Save.

In Terraform -

1. In the google_service_account_iam_policy resource, remove any policy_data bindings for admin, editor, or owner roles.

References:
https://cloud.google.com/iam/docs/creating-managing-service-accounts
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_service_account_iam