You can now optionally use network security groups (NSGs) to implement the security rules that control the inbound and outbound traffic between your Oracle Database and Recovery Service. In the OCI console, you can use options to add a Recovery Service subnet to the Recovery Service NSGs configured in the database VCN.

See Configuring Network Resources for Recovery Service.