The image shows an internet region and an OCI region.

The internet region includes an API consumer and custom applications.

The OCI region includes OCI Identity and Access Management, a VCN with a public subnet containing an OCI API Gateway and a private subnet containing OCI Functions and OCI Vault, and an Oracle services network with Oracle Integration and an allowlist.

The OCI API Gateway has bi-directional connections to each of the API consumer, customer applications, OCI Functions, and the allowlist. There are also five workflows:

• 1 and 2c: A bi-directional connection between OCI API Gateway and OCI Functions.
• 2a: A bi-directional connection between OCI Functions and OCI Vault.
• 2b: A bi-directional connection between OCI Functions and OCI Identity and Access Management.
• 3: A bi-directional connection between OCI API Gateway and the allowlist, which has a bi-directional connection with Oracle Integration.