terraform-google-modules/bastion-host/google
Generates a bastion host VM compatible with OS Login and IAP Tunneling that can be used to access internal VMs