If direction is NOT specified, then default is to apply on incoming traffic. For outbound traffic, it is NOT supported to specify source-tags.
Must be one of: INGRESS, EGRESS, IN, OUT.