1. create a service key
  2. setup on terraform cloud a sensitive variable named GOOGLE_CREDENTIALS where the content is given issuing this command: 
    cat /root/ddoro-infra.json |tr -s '\n' ' '
  3. remember to setup on terraform cloud workspace Remote as Execution Mode