Private database nodes need Object Storage, OS repository, IAM, and Vault access while avoiding general internet exposure. Which design is appropriate?

1. Publish administrator credentials so services can connect without authorization.
2. Route all database storage traffic through an arbitrary public web proxy.
3. Block every service endpoint and assume management operations require no connectivity.
4. Configure the documented Oracle Services Network access and restrict routes and security rules accordingly.