SIP Trunk Registration 403 Forbidden with Terraform Applied Credentials

Why is this setting causing the SIP trunk to fail registration immediately after terraform apply?

provider 1.42.0. terraform 1.5.7. region ap-southeast-2.

  • verified credentials match manually created trunk in GC UI.
  • checked SIP trace for 403 Forbidden on REGISTER request.