This image shows a mecial center region connected to an OCI tenancy region as well as other external organizations.

The medical center contains healthcare providers, clinical systems (RIS and PACS), devices, other clinical systems (EMR and HER) and a site-to-site VPN or FastConnect.

The OCI tenancy contains a compartment accessed via an internet gateway and Cloud Guard. Within the compartment is a VCN containing:

• A subnet DMZ, containing:
  • Data Transfer
  • WAF
• A subnet for ingress and egress, containing:
  • Object Storage
  • Load balancer
  • API gateway
  • Dashboards and reports (OTBI, VBCS, APEX)
• A subnet for a secured lakehouse, containing:
  • Functions
  • Integration Cloud
  • Streaming
  • Other lakehouse services, including:
    • Data Integration
    • Data Flow
    • Big Data Service
    • Autonomous Database
    • Object Storage
    • Data Catalog
• A subnet for AI and ML, containing:
  • Data Science
  • AI including OCI Vision
  • Analytics Cloud

The health provider can send data to devices, clinical systems (RIS and PACS), and clinical systems (EMR and EHR). The devices and clinical systems send data to a site-to-site VPN or FastConnect. The VPN or FastConnect can send data to other healthcare providers (callout 4), external organizations (callout 5), or an internet gateway. The internet gateway sends data through Cloud Guard and WAF to a load balancer (callout 8) in the OCI VCN.

The RIS and PACS systems can also send data (callout 1) to the load balancer via Data Transfer, Object Storage, (callout 2) Functions, API gateway, and dashboards and reports (OTBI, VBCS, APEX).

The load balancer receives data from the WAF and dashboards and reports, and sends to the API gateway. The API gateway receives data from the dashboards and reports, load balancer, and Functions, and sends data to Integration Cloud and Streaming.

Streaming receives data from the API gateway and sends data to Integration Cloud, as well as Autonomous Database and Object Storage in the lakehouse services.

Integration Cloud recieves data from the API gateway and streaming, and sends data to Object Storage (in the subnet) (callout 3), as well as Big Data Service and Autonomous Database in the lakehouse services.

In the lakehouse services (callout 7), there are Data Integration, Data Flow, Big Data, and Autonomous Database sharing data, as well as Data Catalog receiving data from Object Storage, and sending data to Big Data Service. The Autonomous Database is also sending data to Data Science, AI, and Analytics Cloud. Analytics Cloud is sending data to the dashboards and reports.

The other Oracle services (callout 6) in the VCN include:

• NAT gateway
• Logging
• Maximum security zone
• Events
• Policies
• Service gateway
• IAM
• Security lists
• Encryption