Connect Object Storage from Instance in Private Subnet (Spoke VCN) Using Service Gateway

This guide walks you through granting an instance in a private subnet secure access to OCI Object Storage using a Service Gateway within a VCN. With this setup, your workload can access Object Storage without requiring public IPs or Internet access, keeping traffic private within OCI’s network.

---

Prerequisites

Before starting this guide, ensure you have:

• A VCN with at least one private subnet
• A Compute Instance deployed in the private subnet
• An Object Storage bucket created in the same region
• Appropriate IAM policies allowing your instance to access Object Storage

---