Your security team has mandated that all traffic to Oracle Cloud Infrastructure Object Storage must be encrypted end-to-end and must not be routed…

Requirements: End-to-end encryption, no public internet for Object Storage access.

Options Analysis:

Service Gateway: Private access to Object Storage.

NAT Gateway: Public internet access; unsuitable.

Private Endpoint: Alternative private access, but newer feature.

HTTPS: Ensures in-transit encryption.

Evaluate Options:

A: Encryption at rest doesn’t cover transit; incomplete.

B: NAT uses public internet; violates policy; incorrect.

C: Service Gateway with HTTPS ensures full encryption and privacy; correct.

D: Private Endpoint with HTTPS is valid but less common than Service Gateway; slightly less optimal

historically.

Conclusion: Service Gateway with HTTPS is most secure and compliant.

Service Gateway is standard for private Object Storage access. The Oracle Networking Professional

study guide states, "A Service Gateway with HTTPS API calls ensures end-to-end encrypted traffic to

Object Storage without public internet traversal" (OCI Networking Documentation, Section: Service

Gateway). This meets security mandates effectively.

Reference: Oracle Cloud Infrastructure Documentation - Service Gateway.