Location of the CaPool. A full list of valid locations can be found by running gcloud privateca locations list. Used to find the parent resource to bind the IAM policy to
gcloud privateca locations list