Recovery Service requires a private subnet for backup and recovery operations in each database virtual cloud network (VCN) within your tenancy.

An important part of your backup strategy is network isolation and access control for transferring backups over the network. Recovery Service simplifies this process using Recovery Service subnets.

Oracle recommends that your database VCN includes at least one private subnet dedicated for backups to Recovery Service. You can then register a Recovery Service subnet to enable Recovery Service to access databases in the VCN.

You can implement access control by assigning Oracle Cloud Infrastructure (OCI) policies that permit Recovery Service to access databases only in a chosen VCN.