This image shows an Oracle Cloud Infrastructure tenancy enclosing a region with object storage for the region. The region includes a single availability domain with three fault domains.

A compartment encloses a virtual cloud network (VCN). Compartments cross all regions in a tenancy. The tenancy provides Cloud Guard protection across the tenancy on a compartment level.

The VCN provides three private regional subnets, a service gateway, and a dynamic routing gateway for private connections from the customer's data center through IPSec VPN or FastConnect. The VCN provides routing tables for each subnet and each subnet provides its own security list access. The regional subnets are arranged as functional layers: