The image shows the architecture for an Oracle Database Service for Microsoft Azure deployment.

The Oracle Database Service for Microsoft Azure Control Plane resides between the Azure Region and the Oracle Cloud Infrastructure (OCI) Region.

The Azure Region contains the following:

Service VNet contains an Azure Data Lake, Azure Synapse Analytics, and Power BI.
VNet (172.16.6.0/24) contains the Application Server.
Security VNet has one availability domain subnet for the Azure Availability Domain.

The OCI Region contains the following VCNs and components:

Database VCN (10.0.6.0/23) and Database Subnet for Oracle Exadata Database Service on Dedicated Infrastructure.
Admin VCN (10.5.0.0/26) and Admin Subnet for Oracle Enterprise Manager and a Bastion Subnet for the Bastion Host.
Oracle Services Network: Oracle Cloud Infrastructure File Storage, Oracle Cloud Infrastructure Audit, Oracle Cloud Infrastructure Logging, Oracle Cloud Infrastructure Vault, User Identity Cloud, Admin Identity Cloud, and Oracle Cloud Guard.

Each OCI subnet has a route table and security list. Information flows from the Oracle Exadata Database Service on Dedicated Infrastructure to Enterprise Manager in the Admin Subnet.

Peering over a low latency OCI Managed Network Link connects the Azure Region with the OCI Region. Data flows through a Dynamic Routing Gateway on the Database VCN in the OCI Region.

A Security Gateway connects the Database VCN to the following services in the Oracle Services Network: OCI Object Storage, OCI Audit, OCI Logging, OCI Vault, User Identity Cloud, Admin Identity Cloud, and Oracle Cloud Guard. In addition, two-way communication exists between the Azure Availability Domain and the Oracle Services Network.