The image shows an OCI region containing a VCN, Object Storage, IAM, Cloud Guard, Key Vault, and Monitoring services.

The VCN has a dynamic routing gateway (DRG), internet gateway, and service gateway; and contains a Bastion subnet (with a Bastion service), a front end application subnet (with an autoscaling front end), a caching layer subnet (with Cache with Redis), and a database subnet (with Database with PostgreSQL).

An on-premises section containing an admin, devices, script, and API connect from customer-premises equipment to the VCN's DRG via FastConnect.

An internet section containing a browser, devices, script, and API connect to the VCN's internet gateway through a web application firewall (WAF).

Within the VCN, the Bastion subnet connects to the front end application subnet; and the autoscaling subnet therein connects to both the Cache with Redis and the Database with PostgreSQL services.