A private Exadata deployment needs access to OCI Object Storage without public internet routing. Which network component should be evaluated?

1. An internet gateway with no route rules and no service gateway.
2. An application HTTP load balancer as the backup storage path.
3. Only a public DNS CNAME for the database.
4. A service gateway with the documented routes and security rules.