The email of a service account indicating the set of instances on the network which match a traffic source in the firewall rule.