A security analyst is documenting how a company's access control system works. She notes that an employee's laptop attempts to open a shared project folder, and the system checks a configured entry that states 'the Finance group may read the Budget folder.' In the subject/object/rule model of access control, which element does the 'Budget folder' represent?