Traffic from on-premises must reach a supported Oracle service privately through a service gateway path. What should be designed explicitly?

1. Only a default route to an internet gateway on every private subnet.
2. The supported transit topology, gateway-associated routes, return routing, and service access policies.
3. A public bucket as the only possible solution.
4. A service gateway attached directly to the customer's physical router.