# GCP Terraform encountering "API requires a quota project"

**URL:** <https://community.observeinc.com/t/gcp-terraform-encountering-api-requires-a-quota-project/186>\
**Category:** Data Ingestion\
**Tags:** troubleshooting, kb, gcp, terraform\
**Created:** [September 11, 2025, 7:37pm UTC](https://community.observeinc.com/t/gcp-terraform-encountering-api-requires-a-quota-project/186 "2025-09-11T19:37:16Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![vijays](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.observeinc.com/vijays/32/79_2.png) [@vijays](https://community.observeinc.com/u/vijays)\
**Post date:** [September 11, 2025, 7:37pm UTC](https://community.observeinc.com/t/gcp-terraform-encountering-api-requires-a-quota-project/186/1 "2025-09-11T19:37:16Z")

</div>

If you are [configuring your GCP project using Terraform](https://docs.observeinc.com/en/latest/content/integrations/gcp/gcp.html#installation "https://docs.observeinc.com/en/latest/content/integrations/gcp/gcp.html#installation") and encounter an error similar to the below upon running the `terraform apply`:

```auto
 Error: Error when reading or editing CloudAssetProjectFeed "projects/<ID>/feeds/jdd-obs-asset-updates": googleapi: Error 403: Your application is authenticating by using local Application Default Credentials. The cloudasset.googleapis.com API requires a quota project, which is not set by default. To learn how to set your quota project, see https://cloud.google.com/docs/authentication/adc-troubleshooting/user-creds .
│ Details:
│ [
│ {
│ "@type": "type.googleapis.com/google.rpc.ErrorInfo",
│ "domain": "googleapis.com",
│ "metadata": {
│ "consumer": "projects/<ID>",
│ "service": "cloudasset.googleapis.com"
│ },
│ "reason": "SERVICE_DISABLED"
│ },
│ {
│ "@type": "type.googleapis.com/google.rpc.LocalizedMessage",
│ "locale": "en-US",
│ "message": "Your application is authenticating by using local Application Default Credentials. The cloudasset.googleapis.com API requires a quota project, which is not set by default. To learn how to set your quota project, see https://cloud.google.com/docs/authentication/adc-troubleshooting/user-creds ."
│ }
│ ]
│ 
│ with module.observe_gcp_collection.google_cloud_asset_project_feed.project_feed[0],
│ on .terraform/modules/observe_gcp_collection/asset.tf line 24, in resource "google_cloud_asset_project_feed" "project_feed":
│ 24: resource "google_cloud_asset_project_feed" "project_feed" {
│ 
╵

```

This can often occur if any of items 7, 8, 9 or 10 were not completed correctly.

Please validate the following steps were completed correctly - [Google Cloud Platform (GCP) App [Legacy] - Observability Cloud documentation](https://docs.observeinc.com/en/latest/content/integrations/gcp/gcp.html#installation)

1. _Set up the [Google Cloud SDK](https://cloud.google.com/sdk/docs/install-sdk "https://cloud.google.com/sdk/docs/install-sdk") and run [gcloud auth application-default login](https://cloud.google.com/sdk/gcloud/reference/auth/application-default/set-quota-project "https://cloud.google.com/sdk/gcloud/reference/auth/application-default/set-quota-project") to create a credentials file for Terraform to use._  
`gcloud auth application-default login`

2. _Set your [quota project](https://cloud.google.com/sdk/gcloud/reference/auth/application-default/set-quota-project "https://cloud.google.com/sdk/gcloud/reference/auth/application-default/set-quota-project"). This is the project that will be used for billing and project quotas._  
`gcloud auth application-default set-quota-project <MYQUOTAPROJECT>`

3. _Set your working project. If you are installing collection for a folder, this is the project you want to be used as the [scoping project](https://cloud.google.com/monitoring/settings/multiple-projects "https://cloud.google.com/monitoring/settings/multiple-projects")._  
`gcloud config set project <MYPROJECT>`

4. _Run_ `export ``GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=some-sa@scoping-project-392418.iam.gserviceaccount.com`_. This runs the terraform as the service account you created in Step 4. A service account is required to create the asset feed, and it cannot be done by a user._  
`export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=some-sa@scoping-project-392418.iam.gserviceaccount.com`