CyberSecurity Architecture - DMZ zone and Proxy

Hi,

an application server in my company internal network have to connect to a public cloud 3d party service in https. A security policy say that the connectivity must be broked (or disintermediated) in DMZ zone with a Gateway or Proxy.

It means the application server can't connect directly to internet service but need a Gateway or Proxy in DMZ zone, "Application Server"-->"Gateway or Proxy"-->"Public cloud". In that way is "Gateway or Proxy" to connect to Public cloud service and …

architecture cybersecurity proxy