The image shows Tableau region, an On-premises (State Network) region, a 3rd Party Cloud region, Other State Health Applications (various locations and clouds) region, Federal Systems region, and anOracle Cloud Infrastructure (OCI) Region. Content flows from the various regions into OCI.

The OCI Region provides an availability domain (AD) and the following in the Oracle Services Network:

Backup/Restore with the Oracle Database Backup Cloud Service
Oracle Cloud Infrastructure Object Storage
Oracle Cloud Infrastructure File Storage
Oracle Cloud Infrastructure Block Storage

The OCI region provides 1 virtual cloud network (VCN) with the following gateways:

Internet Gateway: Provides connectivity between the Tableau region and OCI.
Dynamic routing gateway (DRG): Provides private connectivity between on-premises networks and third-party cloud by using Site-to-Site VPN.
Service gateway: VCNs communicate with services such as object storage over the Oracle network fabric without traversing the internet.

The VCN provides a private subnet, Data Bridge DB Subnet, with its own security list and route table. The subnet provides the following:

OCI GoldenGate Uni-directional Data Replication (Manager): Content is received from Other State Health Applications, On-Premises (State Network) and 3rd Party Cloud.
Staging DB Oracle Base Database Service (Oracle RAC - Node1): Content flows to Staging DB Oracle Base Database Service (Oracle RAC - Node2). It also flows to the Oracle Autonomous Data Warehouse.
Staging DB Oracle Base Database Service (Oracle RAC - Node2)
Oracle Autonomous Data Warehouse: Content is received from Federal Systems, the Tableau Web Layer API, and the Staging DB Oracle Base Database Service (Oracle RAC - Node1).

The Tableau region contains the Tableau Web Layer API, which receives information from the On-Premises (State Network), encrypts the content and sends it to the internet gateway on the OCI region.

The On-Premises (State Network) region includes on-premises applications, a firewall, and customer premises equipment (CPE). Content flows from the applications to the data integration tool, where data scientists and DBAs interact with the data. Content flows from the applications to the data integration tool, where data scientists and DBAs interact with the data. Content flows from the data integration tool to the firewall and is disbursed to the Tableau Web Layer API in the Tableau region and through the CPE and Site-to-Site VPN to the DRG on the OCI Region.

The 3rd Party Cloud region includes a firewall, SaaS Application (consisting of SaaS Application and SaaS Database), OCI GoldenGate Uni-directional Data Replication (Hub), and a VPN Gateway. Content flows from Application Users outside the 3rd party cloud region, through the firewall, to the SaaS Application and SaaS Database. From there, content flows through OCI GoldenGate to the VPN Gateway. Site-to-Site VPN connects the 3rd party Cloud to the DRG on the OCI Region.

The region with Other State Health Applications (Various Locations and Clouds) includes Other Health Databases and Data Integration Tools. Content flows from the Data Integration Tools to the OCI GoldenGate Uni-directional Data Replication (Hub) on the Data Bridge DB Subnet (Private Subnet) on OCI.

The region with Federal Systems includes Federal Data Warehouses and Data Integration Tools. Content flows from the Data Integration Tools to the Federal Data Warehouses and to Autonomous Data Warehouse on the Data Bridge DB Subnet (Private Subnet) on OCI.