The `operation` object is included in the message, so there will be information about the firewall ID. Good question about the cleanup though. Even before this change, if a firewall creation failed, there would be an orphaned network instance created. `GoogleComputeEngineService.cleanUpIncidentalResourcesOfDeadNodes()` would tidy this up but I'm uncertain if jclouds would call it this chain of events?