bucket.tf

data "google_iam_policy" "viewer" {
  binding {
    role = "roles/storage.objectViewer"
    members = [
      "allUsers",
    ]
  }
}
resource "google_storage_bucket_iam_policy" "foo-public-read" {
  bucket      = google_storage_bucket.editor.name
  policy_data = data.google_iam_policy.viewer.policy_data
}