This image shows a single region, availability domain, and virtual cloud network (VCN). The following services and features are provided for the region:

• Identity and access management
• Object storage

The virtual cloud network (VCN) provides a route table and security list and the following gateways:

• Internet gateway: Provides communications between public subnets and internet hosts.
• Network address translation (NAT) gateway: Enables private resources in a VCN to access hosts on the internet, without exposing those resources to incoming internet connections.
• Service gateway: VCNs communicate with services such as object storage over the Oracle network fabric without traversing the internet.

The VCN also includes two subnets:

• Public Subnet: Includes a virtual machine running Tomcat and Oracle REST Data services (ORDS) and connects to external Knowesis clients using the internet gateway.
• Private Subnet: Provides a database system for project reporting and an APEX app to render contractual information and project reporting information. The database uses the NAT gateway to access the public internet and the APEX app uses the service gateway to access Oracle Cloud Infrastructure Object Storage.