The image shows three enclaves for cyber resilience on OCI—the OCI Production Enclave, OCI Vault Enclave, and Safe Restore Enclave. Each enclave is separated by an "Administrative air gap" which means administrative actions are isolated for security.

OCI Production Enclave hosts the Oracle Identity Domain, Production Admins, Production Admins IAM Policy, and the Applications compartment. The Applications compartment hosts:

• Three virtual machines.
• OCI File Storage
• Two Oracle Exadata Database Service on Dedicated Infrastructure databases instances which connect through a Private Endpoint (PE) using a secure internal connection to Oracle Database Zero Data Loss Autonomous Recovery Service.

OCI Vault Enclave hosts Oracle Identity Domain, Vault Admins, Vault Admins IAM Policy, Orchestration Server, and an Immutable Vault Bucket.

Safe Restore Enclave hosts Oracle Identity Domain, Safe Restore Admins, Safe Restore Admins, and IAM Policy.