Private instances need to access OCI Object Storage without routing that traffic through the public internet. Which gateway should be used for the supported service path?

1. Local peering gateway with no service route
2. Service gateway
3. DNS resolver as the entire traffic route
4. Internet gateway requiring a public IP on each instance