A reference to the zone where the machine resides. Used to find the parent resource to bind the IAM policy to