The image shows how Data Safe connects to databases in a multicloud environment. User groups on the Internet access both an OCI region, an Amazon Web Service (AWS), and a Microsoft Azure instance.

The OCI region comprises a tenancy, a Data Safe Service virtual cloud network (VCN), and a private endpoint VCN. The tenancy contains an auditing service, on-premises connectors, and database targets.

The AWS instance contains a public subnet, which contains a Data Safe connector, and a private subnet, which contains an Oracle database.

The Mucrosoft Azure instance contains a public subnet, which contains a Data Safe connector, and a private subnet, which contains an Oracle database.

The OCI private endpoint IP sends traffic over FastConnect to the Oracle databases in the AWS and Zure instances, which, in turn, route data through their local Data Safe connectors and then, via a TLS tunnel, to the Data Safe Service VPN in the OCI region.