A workload requires access to supported Oracle regional services without sending that traffic through the public internet. Which VCN component is appropriate?

1. A service gateway with a route for the relevant Oracle Services Network destination.
2. A local peering gateway to a compartment.
3. A NAT gateway as the only possible private service path.
4. An internet gateway with all ingress rules removed.