{"id":79,"title":"AWS\u2019te Kimlik Y\u00f6netimi ve Eri\u015fim Kontrol\u00fc i\u00e7in Temel Hizmet: AWS","content":"Bulut bili\u015fimde kullan\u0131c\u0131lar\u0131 takip etmek, kimlik do\u011frulamalar\u0131n\u0131 y\u00f6netmek ve kaynaklara eri\u015fimi kontrol etmek, g\u00fcvenlik ve uyumlulu\u011fu sa\u011flamak i\u00e7in kritik \u00f6neme sahiptir. Amazon Web Services (AWS) <\/strong>ortamlar\u0131nda bu g\u00f6revleri merkezi ve g\u00fcvenli bir \u015fekilde yerine getirmek i\u00e7in en uygun hizmet, Identity and Access Management (IAM) <\/strong>hizmetidir. Bu yaz\u0131da, AWS IAM\u2019\u0131n neden kullan\u0131c\u0131 y\u00f6netimi, eri\u015fim denetimi ve kimlik do\u011frulama s\u00fcre\u00e7leri;

AWS IAM Nedir?<\/strong><\/h3> AWS IAM, kullan\u0131c\u0131lar, gruplar, roller ve izin politikalar\u0131 olu\u015fturarak AWS kaynaklar\u0131na eri\u015fimi g\u00fcvenli bir \u015fekilde y\u00f6netmenizi sa\u011flayan hizmettir. Temel olarak \u015fu i\u015flevleri sunar:
  • Kullan\u0131c\u0131, Grup ve Rol Y\u00f6netimi: <\/strong>Bireysel kullan\u0131c\u0131lar, kullan\u0131c\u0131 gruplar\u0131 ve ge\u00e7ici eri\u015fim i\u00e7in roller olu\u015fturur.<\/li>
  • Eri\u015fim Kontrol\u00fc: <\/strong>Kullan\u0131c\u0131lara veya rollerine kaynaklara eri\u015fim izni verir.<\/li>
  • Kimlik Do\u011frulama: <\/strong>Kullan\u0131c\u0131lar\u0131n kimli\u011fini do\u011frular (\u00f6rne\u011fin, parola, \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama).<\/li>
  • Yetkilendirme: <\/strong>Kullan\u0131c\u0131n\u0131n hangi i\u015flemleri yapabilece\u011fini tan\u0131mlar (\u00f6rne\u011fin, S3 bucket\u2019lar\u0131n\u0131 okuma, EC2 ba\u015flatma).<\/li> <\/ul>

    Neden AWS IAM Tercih Edilmelidir?<\/strong><\/h3>

    A. Kullan\u0131c\u0131, Grup ve Rol Olu\u015fturma<\/strong><\/h4>
    • Kullan\u0131c\u0131lar: <\/strong>Bireysel kullan\u0131c\u0131 hesaplar\u0131 olu\u015fturabilirsiniz (\u00f6rne\u011fin, geli\u015ftiriciler, sistem y\u00f6neticileri).<\/li>
    • Gruplar: <\/strong>Benzer izinlere sahip kullan\u0131c\u0131lar\u0131 gruplara toplayarak y\u00f6netim kolayl\u0131\u011f\u0131 sa\u011flar.<\/li>
    • Roller: <\/strong>Ge\u00e7ici eri\u015fim i\u00e7in olu\u015fturulur (\u00f6rne\u011fin, EC2 \u00f6rneklerinin belirli bir IAM rol\u00fcn\u00fc kullanmas\u0131).<\/li> <\/ul>
      <\/div>

      B. Ayr\u0131nt\u0131l\u0131 \u0130zin Politikalar\u0131 (Policies)<\/strong><\/h4>
      • IAM, JSON tabanl\u0131 politikalarla en az ayr\u0131cal\u0131k ilkesi (least privilege) <\/strong>\u2019ne izin verir.<\/li> <\/ul>

        Kaynaklara Eri\u015fim Kontrol\u00fc<\/strong><\/h4>
        • IAM, AWS kaynaklar\u0131na (\u00f6rne\u011fin, S3, EC2, Lambda) eri\u015fimi do\u011frudan y\u00f6netir.<\/li>
        • Kaynak baz\u0131nda eri\u015fim denetimi (\u00f6rne\u011fin, belirli bir DynamoDB tablosuna eri\u015fim) m\u00fcmk\u00fcnd\u00fcr.<\/li> <\/ul>

          Merkezi Kimlik Do\u011frulama ve Yetkilendirme<\/strong><\/h4>
          • IAM, kullan\u0131c\u0131lar\u0131n kimli\u011fini do\u011frular (\u00f6rne\u011fin, AWS CLI ile aws configure<\/code> komutu).<\/li>
          • Yetkilendirme i\u00e7in politikalar\u0131 de\u011ferlendirir ve i\u015flemi onaylar.<\/li> <\/ul>

            Kullan\u0131c\u0131 Etkinliklerini \u0130zleme ve Kaydetme<\/strong><\/h4>
            • IAM, AWS CloudTrail <\/strong>ile t\u00fcm kullan\u0131c\u0131 etkinliklerini loglar (\u00f6rne\u011fin, kim EC2 ba\u015flatt\u0131?).<\/li>
            • Bu loglar, denetim ve g\u00fcvenlik analizleri i\u00e7in kullan\u0131l\u0131r.<\/li> <\/ul>

              \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA) Deste\u011fi<\/strong><\/h4>
              • IAM, fiziksel veya sanal MFA cihazlar\u0131yla iki fakt\u00f6rl\u00fc kimlik do\u011frulama sa\u011flar.<\/li>
              • Bu, hesap g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r.<\/li> <\/ul>

                Ge\u00e7ici Kimlik Bilgileri Sa\u011flama<\/strong><\/h4>
                • IAM, ge\u00e7ici eri\u015fim anahtarlar\u0131 (\u00f6rne\u011fin, federasyon kullan\u0131c\u0131lar\u0131 i\u00e7in) sa\u011flar.<\/li>
                • Bu anahtarlar belirli bir s\u00fcre ge\u00e7erlidir ve g\u00fcvenlik riskini azalt\u0131r.<\/li> <\/ul> Di\u011fer AWS hizmetleri g\u00fcvenlik odakl\u0131 olsa da, do\u011frudan kullan\u0131c\u0131 ve eri\u015fim y\u00f6netimi i\u00e7in uygun de\u011fildir:
                  <\/div>
                  Hizmet<\/strong><\/div><\/th>
                  \u0130\u015flev<\/strong><\/div><\/th>
                  S\u0131n\u0131rl\u0131l\u0131klar<\/strong><\/div><\/th> <\/tr> <\/thead>
                  AWS Firewall Manager<\/strong><\/div><\/td>
                  G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 y\u00f6netir.<\/div><\/td>
                  Kullan\u0131c\u0131 kimli\u011fi veya eri\u015fim kontrol\u00fc sa\u011flamaz.<\/div><\/td> <\/tr>
                  AWS Shield<\/strong><\/div><\/td>
                  DDoS koruma sa\u011flar.<\/div><\/td>
                  Kullan\u0131c\u0131 etkinliklerini izlemez.<\/div><\/td> <\/tr>
                  Amazon API Gateway<\/strong><\/div><\/td>
                  API'leri y\u00f6netir.<\/div><\/td>
                  Kullan\u0131c\u0131 kimlik do\u011frulama i\u00e7in do\u011frudan uygun de\u011fildir.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div>

                  Troubleshooting \/ Sorun giderme:<\/strong><\/h3>
                  Soru<\/strong><\/div><\/th>
                  \u00c7\u00f6z\u00fcm<\/strong><\/div><\/th> <\/tr> <\/thead>
                  \"Access Denied\" Hatas\u0131 Al\u0131n\u0131yor Mu?<\/strong><\/div><\/td>
                  Kullan\u0131c\u0131n\u0131n politikas\u0131n\u0131 kontrol edin (IAM > Users > > Permissions<\/code>).<\/div><\/td> <\/tr>
                  Kullan\u0131c\u0131 Eri\u015fimini Kald\u0131rmak \u0130stiyorum:<\/strong><\/div><\/td>
                  Kullan\u0131c\u0131n\u0131n politikalar\u0131n\u0131 kald\u0131r\u0131n veya hesab\u0131n\u0131 silin.<\/div><\/td> <\/tr>
                  Eri\u015fim Loglar\u0131 Nas\u0131l \u0130zlenir?<\/strong><\/div><\/td>
                  AWS CloudTrail<\/strong>konsolunu a\u00e7\u0131n ve ilgili etkinlikleri filtreleyin.<\/div><\/td> <\/tr>
                  Ge\u00e7ici Eri\u015fim Anahtar\u0131 Nas\u0131l Olu\u015fturulur?<\/strong><\/div><\/td>
                  aws sts get-federationToken<\/code>veyaassume-role<\/code>komutlar\u0131n\u0131 kullan\u0131n.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div>

                  AWS IAM, kullan\u0131c\u0131lar\u0131 olu\u015fturmak, y\u00f6netmek, kimlik do\u011frulamak ve kaynaklara eri\u015fim kontrol\u00fc sa\u011flamak i\u00e7in en g\u00fc\u00e7l\u00fc ve esnek \u00e7\u00f6z\u00fcmd\u00fcr. Di\u011fer hizmetler g\u00fcvenlik odakl\u0131 olsa da do\u011frudan kullan\u0131c\u0131 y\u00f6netimi sa\u011flamaz. IAM\u2019\u0131n politika esnekli\u011fi, MFA deste\u011fi ve CloudTrail entegrasyonu, AWS ortamlar\u0131nda g\u00fcvenli ve etkili bir kimlik y\u00f6netimi altyap\u0131s\u0131 kurman\u0131za olanak tan\u0131r. Karma\u015f\u0131k politikalar olu\u015fturmak i\u00e7in AWS IAM Policy Generator <\/strong>arac\u0131n\u0131 kullan\u0131n. Eri\u015fim loglar\u0131n\u0131 CloudTrail <\/strong>ile izleyerek g\u00fcvenlik ihlallerini tespit edin.<\/p> <\/div> <\/div>","excerpt":"Bulut bili\u015fimde kullan\u0131c\u0131lar\u0131 takip etmek, kimlik do\u011frulamalar\u0131n\u0131 y\u00f6netmek ve kaynaklara eri\u015fimi kontrol etmek, g\u00fcvenlik ve uyumlulu\u011fu...","created_at":"2025-05-01 13:47:43","updated_at":"2026-09-07 08:27:24","category_id":6,"view_count":628,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 13:47:43","featured_image":"resimyok.jpg","slug":"awste-kimlik-yonetimi-ve-erisim-kontrolu-icin-temel-hizmet-aws","category_name":"Sistem","category_slug":"sistem"}