Seems to be consistent with how we're doing networks/firewall creation in GCE...but if you have a better suggestion, I'm open to it.