You assist different engineering teams in deploying their infrastructure on Google Cloud. Your company has defined certain practices required for all workloads. You need to provide the engineering tea

Granting the Project Editor role provides overly broad permissions, violating the principle of least privilege, and does not enforce specific company practices or help teams deploy compliant infrastructure without knowing details.

While training is beneficial, it does not provide an automated solution for enforcing compliance or abstracting implementation details, and teams would still need to manually apply practices.

Organization policies enforce constraints at the organizational level (e.g., allowed resource types) but do not provide a mechanism for teams to *deploy* compliant infrastructure components without understanding *how* to build them compliantly.

Writing Terraform modules allows you to encapsulate the company's required practices, security configurations, and best practices into reusable and version-controlled infrastructure templates. Engineering teams can then consume these modules to deploy compliant infrastructure independently, abstracting away complex implementation details and ensuring consistency across all workloads.