The image shows an OCI region that contains a parent compartment and an Events instance, an Add DNS Record function and a Remove DNS Record function. The parent compartment within the region contains three availability domainsd (AD), which as spanned by a virtual cloud network (VCN). The VCN contains two private subnets, which themselves span all three ADs. Access to both subnets is controlled by individual cloud guard implementations and security lists. Access to the VCN is through either a service gateway or a NAT gateway.