questions regarding vpc service controls

Hi ,

Please go through and reply for below questions

I am going through the concepts of vpc service controls and have below questions. I may implement them sometime later.

Q1)

Suppose , i have a windows GCE VM1 in VPC perimeter p1 and another windows GCE VM2 in Perimeter p2 and want to access VM2 from VM1 using RDP. Assume related firewall rule is present. Do i still need to add Project 1 details in the ingress rules of the p2. I was searching for answers through chatgpt/pilot and they both responded that it is enough if we have firewall rules and need not add in ingress rule of the p2 perimeter. Can you please confirm.

Q2)

https://docs.cloud.google.com/vpc-service-controls/docs/ingress-egress-rules#ingress-rules-reference

In the above link, can i use the service account of the VM1 in the identities section of the ingress rule.