Private-subnet Oracle Functions and OKE Pods for the city intranet must reach Vault without exposing the apps to the internet or dropping user keys on nodes. What is the appropriate pattern?
Select an answer to reveal the explanation.
Short Explanation
Use the building’s private service corridor—the service gateway—to reach Vault, and wear a workload or resource principal badge instead of taping user keys to the server.
Full Explanation
OCI Vault private access from a VCN uses a service gateway. Functions in a private subnet and OKE Pods that need Vault should combine that path with a resource or workload principal. Opening functions to the internet or embedding user keys on nodes is not a security measure.