A list of instance tags indicating the set of instances on the network to which the rule applies if all other fields match.