Consider a scenario where you have several private subnets within your VCN, and instances in...

Goal: Private, secure, least-privilege access to Object Storage across subnets.

Option A: Internet Gateway uses public access, violating privacy—incorrect.

Option B: NAT Gateway is for internet, not OCI services—incorrect.

Option C: Service Gateway provides private access; IAM policies enforce least privilege; route tables manage traffic—correct.

Option D: Private Endpoints per bucket/subnet are inefficient and unscalable—incorrect.

Conclusion: Option C is efficient and secure.

Oracle states:

"A Service Gateway enables private access to Object Storage. Use IAM policies for least-privilege access and route tables for traffic control."This supports Option C. Reference:Service Gateway Overview - Oracle Help Center(docs.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm).