{"id":32783,"date":"2025-10-25T23:01:24","date_gmt":"2025-10-25T20:01:24","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/"},"modified":"2025-10-25T23:01:24","modified_gmt":"2025-10-25T20:01:24","slug":"gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/","title":{"rendered":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz&#8230;"},"content":{"rendered":"<p><body><\/p>\n<p style=\"font-size: 1.1em; line-height: 1.6; margin-bottom: 1.5em; color: #34495e;\">\nAmazon CloudFront orjinlerinizi entegre AWS g\u00fcvenlik \u00f6zellikleriyle nas\u0131l koruyaca\u011f\u0131n\u0131z\u0131 \u00f6\u011frenin. OAI, OAC, AWS WAF gibi ara\u00e7larla i\u00e7erik da\u011f\u0131t\u0131m g\u00fcvenli\u011finizi art\u0131rmak i\u00e7in ad\u0131m ad\u0131m y\u00f6nergeleri ve en iyi uygulamalar\u0131 ke\u015ffedin. Bu kapsaml\u0131 rehber, i\u00e7eriklerinizi siber tehditlere kar\u015f\u0131 g\u00fcvence alt\u0131na alman\u0131z i\u00e7in pratik bilgiler sunuyor.\n<\/p>\n<h2 style=\"font-size: 1.8em; margin-top: 2em; margin-bottom: 1em; color: #2c3e50;\">Neden CloudFront Orjin G\u00fcvenli\u011fi Kritik \u00d6neme Sahip?<\/h2>\n<p>\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN&#8217;ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan &#8220;orjin sunucular\u0131&#8221; do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.\n<\/p>\n<p>\nBir CloudFront da\u011f\u0131t\u0131m\u0131nda orjin sunucusu, S3 kovas\u0131, EC2 \u00fczerindeki bir web sunucusu, Application Load Balancer (ALB) veya ba\u015fka bir HTTP\/HTTPS u\u00e7 noktas\u0131 olabilir. Bu orjinler, uygulaman\u0131z\u0131n kalbi ve hassas verilerinizin bar\u0131na\u011f\u0131d\u0131r. E\u011fer bu orjinler uygun \u015fekilde korunmazsa, k\u00f6t\u00fc niyetli akt\u00f6rler do\u011frudan orjin sunucusuna sald\u0131rarak CloudFront \u00f6nbelle\u011fini atlayabilir, \u00f6nbelle\u011fe al\u0131nmam\u0131\u015f i\u00e7eri\u011fe eri\u015febilir, DDoS sald\u0131r\u0131lar\u0131yla hizmeti kesintiye u\u011fratabilir veya hassas verileri ele ge\u00e7irebilir. Bu durum, yaln\u0131zca hizmet kesintisi ve itibar kayb\u0131na yol a\u00e7makla kalmaz, ayn\u0131 zamanda ciddi veri ihlalleri ve yasal yapt\u0131r\u0131mlar gibi felaket senaryolar\u0131na da neden olabilir. Dolay\u0131s\u0131yla, CloudFront&#8217;u etkin bir \u015fekilde kullan\u0131rken, orjin g\u00fcvenli\u011fini en \u00fcst d\u00fczeyde tutmak, genel g\u00fcvenlik duru\u015funuzun vazge\u00e7ilmez bir par\u00e7as\u0131d\u0131r. Bu, sadece bir &#8220;g\u00fczel uygulama&#8221; de\u011fil, modern web mimarilerinin temel bir gereklili\u011fidir. G\u00fcvenli bir orjin, t\u00fcm i\u00e7erik da\u011f\u0131t\u0131m zincirinizin g\u00fc\u00e7l\u00fc olmas\u0131n\u0131 sa\u011flar.\n<\/p>\n<p>\nOrjin g\u00fcvenli\u011fi, bir\u00e7ok farkl\u0131 vekt\u00f6rden gelebilecek tehditlere kar\u015f\u0131 kapsaml\u0131 bir savunma mekanizmas\u0131 kurmay\u0131 gerektirir. \u00d6rne\u011fin, DDoS (Distributed Denial of Service) sald\u0131r\u0131lar\u0131, orjin sunucusunu a\u015f\u0131r\u0131 y\u00fckleyerek eri\u015filemez hale getirebilir. Yetkisiz eri\u015fim denemeleri, hassas bilgilere s\u0131zmay\u0131 hedefleyebilir. API suiistimalleri, uygulaman\u0131z\u0131n i\u015fleyi\u015fini bozabilir veya veri manip\u00fclasyonuna yol a\u00e7abilir. Bu nedenle, CloudFront&#8217;un sa\u011flad\u0131\u011f\u0131 g\u00fcvenlik \u00f6zelliklerini kullanarak orjin sunucular\u0131n\u0131z\u0131 bu t\u00fcr tehditlere kar\u015f\u0131 g\u00fc\u00e7lendirmek hayati \u00f6neme sahiptir. Bu makale boyunca, bu kritik g\u00fcvenlik katmanlar\u0131n\u0131 ad\u0131m ad\u0131m nas\u0131l uygulayaca\u011f\u0131n\u0131z\u0131 ve en iyi uygulamalar\u0131 nas\u0131l benimseyece\u011finizi detayland\u0131raca\u011f\u0131z. Amac\u0131m\u0131z, hem yeni ba\u015flayanlar\u0131n hem de deneyimli AWS kullan\u0131c\u0131lar\u0131n\u0131n, CloudFront da\u011f\u0131t\u0131mlar\u0131n\u0131n arkas\u0131ndaki orjinleri sa\u011flam bir \u015fekilde korumalar\u0131na yard\u0131mc\u0131 olmakt\u0131r.\n<\/p>\n<div style=\"background-color: #e0f2f7; border-left: 5px solid #2196f3; padding: 10px; margin: 15px 0;\">\n  <strong>Uzman \u0130pucu:<\/strong> Orjin g\u00fcvenli\u011fi stratejinizi olu\u015ftururken, &#8220;derinlemesine savunma&#8221; prensibini benimseyin. Tek bir g\u00fcvenlik katman\u0131na g\u00fcvenmek yerine, \u00e7oklu g\u00fcvenlik kontrollerini bir araya getirerek daha diren\u00e7li bir yap\u0131 kurun.\n<\/div>\n<h2 style=\"font-size: 1.8em; margin-top: 2em; margin-bottom: 1em; color: #2c3e50;\">CloudFront Orjin G\u00fcvenli\u011finin Temel Ta\u015flar\u0131 Nelerdir?<\/h2>\n<p>\nAmazon CloudFront&#8217;u kullan\u0131rken orjin sunucular\u0131n\u0131z\u0131 g\u00fcvende tutmak i\u00e7in birka\u00e7 temel mekanizma bulunmaktad\u0131r. Bu mekanizmalar, CloudFront&#8217;un orjininize yetkili bir \u015fekilde eri\u015fmesini sa\u011flarken, di\u011fer t\u00fcm do\u011frudan eri\u015fim giri\u015fimlerini engellemeyi hedefler. \u0130\u015fte bu mekanizmalar\u0131n en \u00f6nemlileri ve nas\u0131l \u00e7al\u0131\u015ft\u0131klar\u0131:\n<\/p>\n<h3>Orjin Eri\u015fim Kimli\u011fi (OAI) ve Orjin Eri\u015fim Kontrol\u00fc (OAC) Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h3>\n<p>\nDaha \u00f6nce CloudFront ile S3 kovalar\u0131n\u0131 kullanm\u0131\u015f olanlar OAI (Origin Access Identity) kavram\u0131na a\u015finad\u0131r. OAI, CloudFront da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n S3 kovas\u0131na eri\u015fmek i\u00e7in kullanabilece\u011fi \u00f6zel bir sanal kimlik olu\u015fturarak \u00e7al\u0131\u015f\u0131r. S3 kovan\u0131n\u0131z\u0131n politikas\u0131na bu OAI&#8217;ye eri\u015fim izni verirseniz, yaln\u0131zca CloudFront da\u011f\u0131t\u0131m\u0131n\u0131z bu kovadaki nesnelere eri\u015febilir, do\u011frudan S3 URL&#8217;leri \u00fczerinden eri\u015fim ise engellenir. Bu, S3&#8217;teki i\u00e7eri\u011finizi herkese a\u00e7\u0131k hale getirmeden CloudFront arac\u0131l\u0131\u011f\u0131yla da\u011f\u0131tman\u0131n en g\u00fcvenli yoludur.\n<\/p>\n<p>\nAncak, OAI&#8217;nin baz\u0131 s\u0131n\u0131rlamalar\u0131 vard\u0131. \u00d6zellikle, yaln\u0131zca S3 orjinleriyle \u00e7al\u0131\u015f\u0131yordu ve modern g\u00fcvenlik uygulamalar\u0131 i\u00e7in baz\u0131 yetenekleri eksikti. \u0130\u015fte bu noktada OAC (Origin Access Control) devreye girer. OAC, OAI&#8217;nin daha yeni, daha g\u00fc\u00e7l\u00fc ve daha esnek bir evrimidir. OAC, S3 kovalar\u0131n\u0131n yan\u0131 s\u0131ra EC2, Application Load Balancer ve di\u011fer HTTP\/HTTPS orjinleri i\u00e7in de g\u00fcvenli eri\u015fim sa\u011flayabilir. OAC, CloudFront ve orjin aras\u0131ndaki ba\u011flant\u0131y\u0131 imzal\u0131 isteklerle (signed requests) g\u00fc\u00e7lendirerek ve \u00e7ift y\u00f6nl\u00fc TLS (mTLS) gibi geli\u015fmi\u015f g\u00fcvenlik kontrolleri sunarak orjin g\u00fcvenli\u011fini bir ad\u0131m \u00f6teye ta\u015f\u0131r.\n<\/p>\n<p>\nOAC&#8217;nin temel faydalar\u0131 \u015funlard\u0131r:\n<\/p>\n<ul>\n<li><strong>S3 D\u0131\u015f\u0131 Orjin Deste\u011fi:<\/strong> Art\u0131k yaln\u0131zca S3 ile s\u0131n\u0131rl\u0131 kalmadan, herhangi bir HTTP\/HTTPS orjini g\u00fcvenli bir \u015fekilde ba\u011flayabilirsiniz.<\/li>\n<li><strong>Daha G\u00fc\u00e7l\u00fc \u015eifreleme:<\/strong> CloudFront ve orjin aras\u0131ndaki ileti\u015fimi daha g\u00fc\u00e7l\u00fc TLS s\u00fcr\u00fcmleri ve \u015fifrelemelerle korur.<\/li>\n<li><strong>Kapsaml\u0131 Protokol Deste\u011fi:<\/strong> HTTP ve HTTPS protokollerini destekler.<\/li>\n<li><strong>Geli\u015fmi\u015f Denetlenebilirlik:<\/strong> Eri\u015fim denetim g\u00fcnl\u00fcklerinde daha ayr\u0131nt\u0131l\u0131 bilgi sa\u011flar.<\/li>\n<\/ul>\n<p>\nOAC yap\u0131land\u0131rmas\u0131 genellikle CloudFront da\u011f\u0131t\u0131m\u0131n\u0131z\u0131 olu\u015ftururken veya mevcut bir da\u011f\u0131t\u0131m\u0131 d\u00fczenlerken yap\u0131l\u0131r. \u0130\u015fte bir OAC olu\u015fturmak i\u00e7in tipik ad\u0131mlar:\n<\/p>\n<ol>\n<li>AWS Y\u00f6netim Konsolu&#8217;nda CloudFront hizmetine gidin.<\/li>\n<li>&#8220;Origin access&#8221; b\u00f6l\u00fcm\u00fcne gidin ve &#8220;Create origin access control&#8221; se\u00e7ene\u011fini t\u0131klay\u0131n.<\/li>\n<li>OAC i\u00e7in bir isim ve a\u00e7\u0131klama belirleyin.<\/li>\n<li>OAC&#8217;yi olu\u015fturduktan sonra, CloudFront da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n orjin ayarlar\u0131nda, kullanmak istedi\u011finiz orjin i\u00e7in bu OAC&#8217;yi se\u00e7in.<\/li>\n<li>E\u011fer orjininiz bir S3 kovas\u0131 ise, CloudFront size kova politikas\u0131n\u0131 otomatik olarak g\u00fcncellemeniz i\u00e7in bir d\u00fc\u011fme veya y\u00f6nerge sunacakt\u0131r. Di\u011fer HTTP orjinleri i\u00e7in, orjininizdeki g\u00fcvenlik grubunun veya Web Uygulama G\u00fcvenlik Duvar\u0131&#8217;n\u0131n (WAF) CloudFront IP aral\u0131klar\u0131ndan gelen isteklere izin verdi\u011finden emin olman\u0131z gerekebilir, ancak do\u011frudan internet eri\u015fimine kapal\u0131 tutulmal\u0131d\u0131r.<\/li>\n<\/ol>\n<p>\nOAC ile yap\u0131land\u0131r\u0131lan bir S3 orjini i\u00e7in S3 kova politikas\u0131n\u0131n bir \u00f6rne\u011fi \u015f\u00f6yle g\u00f6r\u00fcnebilir (<code>YOUR_BUCKET_NAME<\/code> ve <code>YOUR_OAC_ID<\/code> yerine kendi de\u011ferlerinizi koymal\u0131s\u0131n\u0131z):\n<\/p>\n<pre><code class=\"language-json\">\n{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Sid\": \"AllowCloudFrontServicePrincipal\",\n            \"Effect\": \"Allow\",\n            \"Principal\": {\n                \"Service\": \"cloudfront.amazonaws.com\"\n            },\n            \"Action\": \"s3:GetObject\",\n            \"Resource\": \"arn:aws:s3:::YOUR_BUCKET_NAME\/*\",\n            \"Condition\": {\n                \"StringEquals\": {\n                    \"AWS:SourceArn\": \"arn:aws:cloudfront::YOUR_ACCOUNT_ID:distribution\/YOUR_DISTRIBUTION_ID\"\n                }\n            }\n        },\n        {\n            \"Sid\": \"AllowOACAccess\",\n            \"Effect\": \"Allow\",\n            \"Principal\": {\n                \"Federated\": \"arn:aws:iam::YOUR_ACCOUNT_ID:oidc-provider\/cloudfront.amazonaws.com\/${YOUR_OAC_ID}\"\n            },\n            \"Action\": \"s3:GetObject\",\n            \"Resource\": \"arn:aws:s3:::YOUR_BUCKET_NAME\/*\"\n        }\n    ]\n}\n<\/pre>\n<p><\/code><\/p>\n<p>\nBu politika, yaln\u0131zca belirli bir CloudFront da\u011f\u0131t\u0131m\u0131n\u0131n (OAC arac\u0131l\u0131\u011f\u0131yla) S3 kovas\u0131ndaki nesnelere eri\u015fmesine izin verir. Ba\u015fka hi\u00e7bir kaynaktan do\u011frudan eri\u015fim m\u00fcmk\u00fcn de\u011fildir, bu da orjin g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r.\n<\/p>\n<h3>AWS WAF ile A\u011f G\u00fcvenli\u011fini G\u00fc\u00e7lendirme<\/h3>\n<p>\nCloudFront orjin g\u00fcvenli\u011finin bir di\u011fer kritik bile\u015feni de AWS WAF't\u0131r (Web Application Firewall). WAF, web uygulamalar\u0131n\u0131z\u0131 yayg\u0131n web g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 koruyan bir g\u00fcvenlik duvar\u0131d\u0131r. Bu a\u00e7\u0131klar aras\u0131nda SQL enjeksiyonu, siteler aras\u0131 komut \u00e7al\u0131\u015ft\u0131rma (XSS), bot sald\u0131r\u0131lar\u0131 ve DDoS sald\u0131r\u0131lar\u0131 yer alabilir. CloudFront'un \u00f6n\u00fcne konumland\u0131r\u0131lan WAF, k\u00f6t\u00fc niyetli trafi\u011fi orjin sunucunuza ula\u015fmadan \u00f6nce filtreleyerek engeller.\n<\/p>\n<p>\nAWS WAF'\u0131 CloudFront ile entegre etmek olduk\u00e7a basittir. WAF kurallar\u0131n\u0131, iste\u011finizin belirli parametrelerine (\u00f6rne\u011fin, IP adresleri, HTTP ba\u015fl\u0131klar\u0131, sorgu dizeleri, istek g\u00f6vdesi) dayal\u0131 olarak yap\u0131land\u0131rabilirsiniz. \u00d6rne\u011fin, belirli bir \u00fclkedeki IP adreslerinden gelen istekleri engelleyebilir, bilinen k\u00f6t\u00fc ama\u00e7l\u0131 bot trafi\u011fini tespit edip durdurabilir veya uygulaman\u0131z\u0131n belirli API u\u00e7 noktalar\u0131na y\u00f6nelik a\u015f\u0131r\u0131 istekleri s\u0131n\u0131rlayabilirsiniz.\n<\/p>\n<p>\nWAF kurallar\u0131n\u0131 olu\u015ftururken, AWS Managed Rules (AWS Taraf\u0131ndan Y\u00f6netilen Kurallar) setlerini kullanmak, ba\u015flang\u0131\u00e7 i\u00e7in harika bir yoldur. Bu kurallar, AWS g\u00fcvenlik uzmanlar\u0131 taraf\u0131ndan y\u00f6netilir ve g\u00fcncellenir, b\u00f6ylece yayg\u0131n tehditlere kar\u015f\u0131 otomatik koruma sa\u011flarlar. Ayr\u0131ca, kendi \u00f6zel kurallar\u0131n\u0131z\u0131 da yazabilirsiniz. \u0130\u015fte yayg\u0131n WAF kullan\u0131m durumlar\u0131:\n<\/p>\n<ul>\n<li><strong>DDoS Korumas\u0131:<\/strong> H\u0131z tabanl\u0131 kurallar veya co\u011frafi engelleme ile temel DDoS korumas\u0131 sa\u011flar.<\/li>\n<li><strong>Bot Korumas\u0131:<\/strong> Bilinen k\u00f6t\u00fc ama\u00e7l\u0131 botlar\u0131 engelleyerek kaynak t\u00fcketimini azalt\u0131r.<\/li>\n<li><strong>Yayg\u0131n Web A\u00e7\u0131klar\u0131:<\/strong> SQL enjeksiyonu, XSS gibi OWASP Top 10 a\u00e7\u0131klar\u0131na kar\u015f\u0131 koruma sa\u011flar.<\/li>\n<li><strong>API Korumas\u0131:<\/strong> API u\u00e7 noktalar\u0131n\u0131 hedefleyen \u00f6zel sald\u0131r\u0131lar\u0131 engeller.<\/li>\n<li><strong>Co\u011frafi K\u0131s\u0131tlamalar:<\/strong> Belirli co\u011frafyalardan gelen eri\u015fimi k\u0131s\u0131tlar.<\/li>\n<\/ul>\n<p>\nBir WAF Kural Grubu'nun (Rule Group) nas\u0131l g\u00f6r\u00fcnebilece\u011fine dair basitle\u015ftirilmi\u015f bir JSON \u00f6rne\u011fi:\n<\/p>\n<pre><code class=\"language-json\">\n{\n    \"Name\": \"MyWebACL\",\n    \"DefaultAction\": {\n        \"Allow\": {}\n    },\n    \"Rules\": [\n        {\n            \"Name\": \"BlockSQLi\",\n            \"Priority\": 1,\n            \"Action\": {\n                \"Block\": {}\n            },\n            \"Statement\": {\n                \"ByteMatchStatement\": {\n                    \"SearchString\": \"UNION SELECT\",\n                    \"FieldToMatch\": {\n                        \"AllQueryArguments\": {}\n                    },\n                    \"TextTransformations\": [\n                        { \"Priority\": 0, \"Type\": \"LOWERCASE\" }\n                    ],\n                    \"PositionalConstraint\": \"CONTAINS\"\n                }\n            },\n            \"VisibilityConfig\": {\n                \"SampledRequestsEnabled\": true,\n                \"CloudWatchMetricsEnabled\": true,\n                \"MetricName\": \"BlockSQLiMetric\"\n            }\n        },\n        {\n            \"Name\": \"RateLimit\",\n            \"Priority\": 2,\n            \"Action\": {\n                \"Block\": {}\n            },\n            \"Statement\": {\n                \"RateLimitStatement\": {\n                    \"Limit\": 1000,\n                    \"AggregateKeyType\": \"IP\"\n                }\n            },\n            \"VisibilityConfig\": {\n                \"SampledRequestsEnabled\": true,\n                \"CloudWatchMetricsEnabled\": true,\n                \"MetricName\": \"RateLimitMetric\"\n            }\n        }\n    ]\n}\n<\/pre>\n<p><\/code><\/p>\n<p>\nBu \u00f6rnek, basit bir SQL enjeksiyon sald\u0131r\u0131s\u0131n\u0131 tespit eden ve IP ba\u015f\u0131na istek h\u0131z\u0131n\u0131 s\u0131n\u0131rlayan iki kural\u0131 g\u00f6stermektedir. WAF kurallar\u0131, CloudFront da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n \u00f6n\u00fcnde uyguland\u0131\u011f\u0131nda, k\u00f6t\u00fc niyetli trafi\u011fin orjin sunucunuza ula\u015fmas\u0131n\u0131 engeller, b\u00f6ylece orjin kaynaklar\u0131n\u0131z\u0131 korur ve performans y\u00fck\u00fcn\u00fc azalt\u0131r. CloudFront'un global a\u011f\u0131 \u00fczerinde \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in, WAF korumas\u0131 da d\u00fcnya \u00e7ap\u0131nda da\u011f\u0131t\u0131l\u0131r, bu da DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 k\u00fcresel bir savunma sa\u011flar.\n<\/p>\n<div style=\"background-color: #e0f2f7; border-left: 5px solid #2196f3; padding: 10px; margin: 15px 0;\">\n  <strong>Uzman \u0130pucu:<\/strong> WAF kurallar\u0131n\u0131z\u0131 devreye almadan \u00f6nce \"Count\" modunda test edin. Bu, kurallar\u0131n potansiyel olarak engelleyebilece\u011fi me\u015fru trafi\u011fi anlaman\u0131za yard\u0131mc\u0131 olur ve yanl\u0131\u015f pozitifleri \u00f6nler.\n<\/div>\n<h3 style=\"font-size: 1.5em; margin-top: 1.5em; margin-bottom: 0.8em; color: #2c3e50;\">HTTPS ve Sertifika Y\u00f6netimi: Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc ve \u015eifreleme<\/h3>\n<p>\nCloudFront orjin g\u00fcvenli\u011finin ayr\u0131lmaz bir par\u00e7as\u0131 da HTTPS kullan\u0131m\u0131n\u0131 zorunlu k\u0131lmakt\u0131r. HTTPS (Hypertext Transfer Protocol Secure), CloudFront ile kullan\u0131c\u0131lar\u0131n\u0131z ve CloudFront ile orjin sunucunuz aras\u0131ndaki t\u00fcm ileti\u015fimi \u015fifreleyerek veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve gizlili\u011fini sa\u011flar. Bu, ortadaki adam (Man-in-the-Middle) sald\u0131r\u0131lar\u0131n\u0131 \u00f6nler ve hassas verilerin ele ge\u00e7irilmesini zorla\u015ft\u0131r\u0131r.\n<\/p>\n<p>\nCloudFront da\u011f\u0131t\u0131m\u0131n\u0131z i\u00e7in \u00f6zel bir SSL\/TLS sertifikas\u0131 kullanmak, web sitenizin veya uygulaman\u0131z\u0131n g\u00fcvenilirli\u011fini art\u0131r\u0131r. AWS Certificate Manager (ACM) arac\u0131l\u0131\u011f\u0131yla \u00fccretsiz olarak AWS taraf\u0131ndan y\u00f6netilen sertifikalar\u0131 kolayca sa\u011flayabilir ve CloudFront ile entegre edebilirsiniz. ACM, sertifikalar\u0131n\u0131z\u0131n yenilenmesini de otomatik olarak y\u00f6netir, b\u00f6ylece sertifika s\u00fcresi doldu\u011funda hizmet kesintisi riskini ortadan kald\u0131r\u0131r.\n<\/p>\n<p>\nCloudFront da\u011f\u0131t\u0131m\u0131n\u0131z\u0131 yap\u0131land\u0131r\u0131rken a\u015fa\u011f\u0131daki HTTPS ayarlar\u0131n\u0131 g\u00f6z \u00f6n\u00fcnde bulundurmal\u0131s\u0131n\u0131z:\n<\/p>\n<ul>\n<li><strong>Viewer Protocol Policy (G\u00f6r\u00fcnt\u00fcleyici Protokol Politikas\u0131):<\/strong> Kullan\u0131c\u0131lar\u0131n\u0131z\u0131n CloudFront'a nas\u0131l eri\u015fece\u011fini belirler. Genellikle \"Redirect HTTP to HTTPS\" (HTTP'yi HTTPS'e Y\u00f6nlendir) veya \"HTTPS Only\" (Sadece HTTPS) se\u00e7ene\u011fini kullanmal\u0131s\u0131n\u0131z. Bu, t\u00fcm kullan\u0131c\u0131 trafi\u011finin \u015fifrelenmi\u015f bir ba\u011flant\u0131 \u00fczerinden gelmesini sa\u011flar.<\/li>\n<li><strong>Origin Protocol Policy (Orjin Protokol Politikas\u0131):<\/strong> CloudFront'un orjin sunucunuzla nas\u0131l ileti\u015fim kuraca\u011f\u0131n\u0131 belirler. Orjin sunucunuzun HTTPS'i destekledi\u011finden ve ge\u00e7erli bir sertifikaya sahip oldu\u011fundan emin olun. CloudFront'un orjin ile sadece HTTPS \u00fczerinden ileti\u015fim kurmas\u0131n\u0131 sa\u011flamak, u\u00e7tan uca \u015fifrelemeyi garanti eder.<\/li>\n<li><strong>SSL\/TLS Sertifikas\u0131:<\/strong> ACM'den sa\u011flad\u0131\u011f\u0131n\u0131z \u00f6zel bir sertifikay\u0131 CloudFront da\u011f\u0131t\u0131m\u0131n\u0131za atay\u0131n. Bu, m\u00fc\u015fterilerinizin taray\u0131c\u0131lar\u0131nda alan ad\u0131n\u0131z i\u00e7in g\u00fcvenli bir ba\u011flant\u0131 g\u00f6sterilmesini sa\u011flar.<\/li>\n<\/ul>\n<p>\nT\u00fcm bu ad\u0131mlar, verilerinizin hem transit halindeyken (in-transit) hem de orjin sunucunuzda (at-rest, uygun depolama \u015fifrelemesi ile) g\u00fcvende kalmas\u0131n\u0131 sa\u011flamak i\u00e7in kritik \u00f6neme sahiptir.\n<\/p>\n<h2 style=\"font-size: 1.8em; margin-top: 2em; margin-bottom: 1em; color: #2c3e50;\">Geli\u015fmi\u015f Orjin G\u00fcvenli\u011fi Stratejileri ve En \u0130yi Uygulamalar<\/h2>\n<p>\nCloudFront orjin g\u00fcvenli\u011fini sa\u011flaman\u0131n temel mekanizmalar\u0131n\u0131n \u00f6tesinde, daha sa\u011flam bir savunma i\u00e7in uygulanabilecek geli\u015fmi\u015f stratejiler ve en iyi uygulamalar mevcuttur. Bu yakla\u015f\u0131mlar, \u00f6zellikle y\u00fcksek hassasiyetli verilerle \u00e7al\u0131\u015fan veya karma\u015f\u0131k tehdit modellerine sahip uygulamalar i\u00e7in kritik \u00f6neme sahiptir.\n<\/p>\n<h3>Lambda@Edge veya CloudFront Functions ile Dinamik Eri\u015fim Kontrol\u00fc<\/h3>\n<p>\nCloudFront'un g\u00fc\u00e7l\u00fc \u00f6zelliklerinden biri olan Lambda@Edge ve CloudFront Functions, i\u00e7erik da\u011f\u0131t\u0131m s\u00fcrecine mant\u0131k ekleyerek dinamik eri\u015fim kontrol\u00fc sa\u011flaman\u0131za olanak tan\u0131r. Bu sunucusuz i\u015flevler, istekleri CloudFront'un kenar konumlar\u0131nda (edge locations) i\u015fleyebilir, bu da orjininize ula\u015fmadan \u00f6nce \u00f6zel do\u011frulama ve yetkilendirme mant\u0131\u011f\u0131 uygulayabilece\u011finiz anlam\u0131na gelir.\n<\/p>\n<p>\n\u00d6rne\u011fin, Lambda@Edge kullanarak:\n<\/p>\n<ul>\n<li><strong>Token Tabanl\u0131 Yetkilendirme:<\/strong> Her iste\u011fin ge\u00e7erli bir yetkilendirme token\u0131 i\u00e7erip i\u00e7ermedi\u011fini kontrol edebilirsiniz. E\u011fer token yoksa veya ge\u00e7ersizse, iste\u011fi orjine g\u00f6ndermeden reddedebilirsiniz.<\/li>\n<li><strong>Co\u011frafi K\u0131s\u0131tlama \u00d6zelle\u015ftirmesi:<\/strong> AWS WAF'\u0131n co\u011frafi k\u0131s\u0131tlamalar\u0131na ek olarak, belirli kullan\u0131c\u0131 gruplar\u0131na veya abonelik seviyelerine g\u00f6re daha dinamik co\u011frafi eri\u015fim politikalar\u0131 uygulayabilirsiniz.<\/li>\n<li><strong>A\/B Testi veya Ki\u015fiselle\u015ftirme:<\/strong> Kullan\u0131c\u0131 \u00f6zniteliklerine g\u00f6re farkl\u0131 i\u00e7erikler sunarken, bu i\u00e7eriklerin do\u011fru kullan\u0131c\u0131ya gitti\u011finden emin olmak i\u00e7in g\u00fcvenlik kontrolleri ekleyebilirsiniz.<\/li>\n<\/ul>\n<p>\nCloudFront Functions ise daha basit ve performansa duyarl\u0131 i\u015flevler i\u00e7in tasarlanm\u0131\u015ft\u0131r. \u00d6rne\u011fin, bir iste\u011fin ba\u015fl\u0131\u011f\u0131n\u0131 kontrol edip belirli bir de\u011fer i\u00e7ermiyorsa an\u0131nda engellemek gibi senaryolarda kullan\u0131labilir. Bu i\u015flevler, Lambda@Edge'e g\u00f6re daha h\u0131zl\u0131 \u00e7al\u0131\u015f\u0131r ve daha uygun maliyetlidir, \u00e7\u00fcnk\u00fc daha k\u0131sa \u00e7al\u0131\u015fma s\u00fcreleri ve daha az kaynak gereksinimleri vard\u0131r.\n<\/p>\n<p>\n\u0130\u015fte bir CloudFront Function \u00f6rne\u011fi, belirli bir <code>X-Custom-Auth<\/code> ba\u015fl\u0131\u011f\u0131 olmayan istekleri engellemek i\u00e7in:\n<\/p>\n<pre><code class=\"language-javascript\">\nfunction handler(event) {\n    var request = event.request;\n    var headers = request.headers;\n\n    \/\/ Check for a custom authorization header\n    if (!headers['x-custom-auth'] || headers['x-custom-auth'].value !== 'my-secret-token') {\n        return {\n            statusCode: 403,\n            statusDescription: 'Forbidden',\n            headers: {\n                'content-type': { value: 'text\/plain' }\n            },\n            body: 'Unauthorized access.'\n        };\n    }\n\n    \/\/ If the header is present and valid, allow the request to proceed\n    return request;\n}\n<\/pre>\n<p><\/code><\/p>\n<p>\nBu t\u00fcr dinamik kontroller, orjin sunucunuza ula\u015facak isteklerin daha s\u0131k\u0131 bir \u015fekilde filtrelenmesini sa\u011flar ve k\u00f6t\u00fc niyetli veya yetkisiz trafi\u011fin daha erken a\u015famada durdurulmas\u0131na yard\u0131mc\u0131 olur.\n<\/p>\n<h3>\u0130mzal\u0131 URL'ler ve \u0130mzal\u0131 \u00c7erezler ile \u0130\u00e7erik Eri\u015fimini K\u0131s\u0131tlama<\/h3>\n<p>\nBelirli bir i\u00e7eri\u011fin sadece belirli bir s\u00fcre veya belirli ko\u015fullar alt\u0131nda eri\u015filebilir olmas\u0131n\u0131 istedi\u011finizde, CloudFront'un imzal\u0131 URL'ler (Signed URLs) ve imzal\u0131 \u00e7erezler (Signed Cookies) \u00f6zelliklerini kullanabilirsiniz. Bu, \u00f6zellikle premium i\u00e7erik, tek seferlik indirmeler veya s\u00fcreli abonelikler gibi senaryolarda olduk\u00e7a etkilidir.\n<\/p>\n<p>\n<strong>\u0130mzal\u0131 URL'ler:<\/strong> Tek bir dosya veya belirli bir i\u00e7eri\u011fe eri\u015fimi k\u0131s\u0131tlamak i\u00e7in kullan\u0131l\u0131r. Bir URL'ye bir imza, son kullanma tarihi ve iste\u011fe ba\u011fl\u0131 olarak IP adresi k\u0131s\u0131tlamas\u0131 eklenir. Kullan\u0131c\u0131, bu imzal\u0131 URL ile i\u00e7eri\u011fe eri\u015febilir, ancak URL'nin ge\u00e7erlilik s\u00fcresi doldu\u011funda veya imza de\u011fi\u015ftirildi\u011finde eri\u015fim reddedilir.\n<\/p>\n<p>\n<strong>\u0130mzal\u0131 \u00c7erezler:<\/strong> Bir veya daha fazla dosyaya eri\u015fimi k\u0131s\u0131tlamak i\u00e7in kullan\u0131l\u0131r. Genellikle bir web uygulamas\u0131nda oturum a\u00e7m\u0131\u015f kullan\u0131c\u0131lara belirli i\u00e7erik gruplar\u0131na eri\u015fim vermek i\u00e7in kullan\u0131l\u0131r. \u0130mzal\u0131 bir \u00e7erez ayarland\u0131\u011f\u0131nda, kullan\u0131c\u0131 taray\u0131c\u0131s\u0131nda bu \u00e7erezle birlikte t\u00fcm CloudFront isteklerini yapar ve CloudFront, \u00e7erezi do\u011frularak i\u00e7eri\u011fe eri\u015fimi onaylar.\n<\/p>\n<p>\nBu \u00f6zellikler, orjin sunucunuzdaki i\u00e7eri\u011fin yaln\u0131zca yetkili kullan\u0131c\u0131lar veya s\u00fcre\u00e7ler taraf\u0131ndan eri\u015filebilir olmas\u0131n\u0131 sa\u011flayarak \u00f6nemli bir g\u00fcvenlik katman\u0131 ekler. \u00d6rne\u011fin, bir abonelik hizmetinde premium bir videoyu yaln\u0131zca \u00f6deme yapm\u0131\u015f kullan\u0131c\u0131lara sunmak i\u00e7in imzal\u0131 URL'ler kullanabilirsiniz. Bu URL'leri sunucu taraf\u0131nda olu\u015fturmal\u0131 ve sadece yetkilendirilmi\u015f kullan\u0131c\u0131lara vermelisiniz.\n<\/p>\n<h3>G\u00fcvenlik Ba\u015fl\u0131klar\u0131 ve Origin Shield<\/h3>\n<p>\nWeb uygulamalar\u0131n\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rmak i\u00e7in \u00e7e\u015fitli HTTP g\u00fcvenlik ba\u015fl\u0131klar\u0131n\u0131 kullanmak da \u00f6nemlidir. \u00d6rne\u011fin, Content Security Policy (CSP), X-XSS-Protection, X-Content-Type-Options ve Strict-Transport-Security (HSTS) gibi ba\u015fl\u0131klar, yayg\u0131n web sald\u0131r\u0131lar\u0131na kar\u015f\u0131 taray\u0131c\u0131 d\u00fczeyinde koruma sa\u011flar. Bu ba\u015fl\u0131klar\u0131 CloudFront'un \u00e7\u0131kt\u0131 yan\u0131tlar\u0131na ekleyerek t\u00fcm da\u011f\u0131t\u0131lan i\u00e7eri\u011finiz i\u00e7in ge\u00e7erli olmas\u0131n\u0131 sa\u011flayabilirsiniz.\n<\/p>\n<p>\n<strong>CloudFront Origin Shield<\/strong> ise, CloudFront'un orjin sunucunuza yapt\u0131\u011f\u0131 istekleri konsolide eden ek bir \u00f6nbellekleme katman\u0131d\u0131r. Origin Shield, orjininize y\u00f6nelik y\u00fck\u00fc azalt\u0131r ve gereksiz istekleri filtreleyerek orjin sunucunuzu korur. Bu, \u00f6zellikle ani trafik art\u0131\u015flar\u0131nda veya DDoS sald\u0131r\u0131lar\u0131nda orjin sunucunuzun daha dayan\u0131kl\u0131 olmas\u0131na yard\u0131mc\u0131 olur. Origin Shield, orjin sunucunuzu do\u011frudan gelen isteklerden daha da yal\u0131tarak ek bir g\u00fcvenlik ve performans katman\u0131 sunar.\n<\/p>\n<h2 style=\"font-size: 1.8em; margin-top: 2em; margin-bottom: 1em; color: #2c3e50;\">Vaka Analizi: B\u00fcy\u00fck \u00d6l\u00e7ekli Bir Medya \u015eirketinin CloudFront Orjin G\u00fcvenli\u011fi<\/h2>\n<p>\nB\u00fcy\u00fck bir medya \u015firketi, global \u00e7apta kullan\u0131c\u0131lar\u0131na y\u00fcksek \u00e7\u00f6z\u00fcn\u00fcrl\u00fckl\u00fc video i\u00e7erikleri ve statik web sitesi varl\u0131klar\u0131 sunmaktad\u0131r. Bu \u015firketin ana altyap\u0131s\u0131 AWS \u00fczerinde \u00e7al\u0131\u015fmakta ve i\u00e7erik da\u011f\u0131t\u0131m\u0131 i\u00e7in Amazon CloudFront'u yo\u011fun bir \u015fekilde kullanmaktad\u0131r. Kar\u015f\u0131la\u015ft\u0131klar\u0131 temel zorluklar \u015funlard\u0131:\n<\/p>\n<ol>\n<li>Video ak\u0131\u015f sunucular\u0131na (EC2 instance'lar\u0131 \u00fczerinde \u00e7al\u0131\u015fan) do\u011frudan gelen DDoS sald\u0131r\u0131lar\u0131.<\/li>\n<li>S3'teki hassas medya varl\u0131klar\u0131na yetkisiz eri\u015fim giri\u015fimleri.<\/li>\n<li>Y\u00fcksek trafik anlar\u0131nda orjin sunucular\u0131n\u0131n a\u015f\u0131r\u0131 y\u00fcklenmesi.<\/li>\n<li>Farkl\u0131 co\u011frafyalardan gelen eri\u015fim k\u0131s\u0131tlamalar\u0131 ihtiyac\u0131.<\/li>\n<\/ol>\n<p>\nBu zorluklar\u0131n \u00fcstesinden gelmek i\u00e7in medya \u015firketi a\u015fa\u011f\u0131daki CloudFront orjin g\u00fcvenli\u011fi stratejilerini uygulad\u0131:\n<\/p>\n<h3>\u00c7\u00f6z\u00fcm Ad\u0131mlar\u0131 ve Uygulama<\/h3>\n<ol>\n<li><strong>S3 Orjinleri \u0130\u00e7in OAC Ge\u00e7i\u015fi:<\/strong> \u015eirket, statik web sitesi dosyalar\u0131 ve baz\u0131 medya varl\u0131klar\u0131n\u0131 bar\u0131nd\u0131rd\u0131\u011f\u0131 t\u00fcm S3 kovalar\u0131 i\u00e7in mevcut OAI yap\u0131land\u0131rmalar\u0131n\u0131 OAC'ye ta\u015f\u0131d\u0131. Bu, S3'teki i\u00e7eri\u011fin yaln\u0131zca CloudFront arac\u0131l\u0131\u011f\u0131yla eri\u015filebilir olmas\u0131n\u0131 sa\u011flarken, daha g\u00fc\u00e7l\u00fc \u015fifreleme ve denetim yeteneklerinden faydaland\u0131. OAC'ler, S3 kova politikalar\u0131yla birlikte \u00e7al\u0131\u015farak do\u011frudan kova URL'lerinden eri\u015fimi tamamen engelledi.<\/li>\n<li><strong>EC2 Orjinleri \u0130\u00e7in OAC ve G\u00fcvenlik Gruplar\u0131:<\/strong> Video ak\u0131\u015f sunucular\u0131n\u0131n bulundu\u011fu EC2 instances'lar\u0131 i\u00e7in de OAC kullan\u0131ld\u0131. Bu sunucular\u0131n g\u00fcvenlik gruplar\u0131, yaln\u0131zca CloudFront'un bilinen IP aral\u0131klar\u0131ndan ve OAC taraf\u0131ndan imzalanm\u0131\u015f istekleri kabul edecek \u015fekilde yap\u0131land\u0131r\u0131ld\u0131. T\u00fcm di\u011fer portlar ve IP aral\u0131klar\u0131ndan gelen eri\u015fim engellendi, bu da do\u011frudan sunucu sald\u0131r\u0131lar\u0131n\u0131 imkans\u0131z hale getirdi.<\/li>\n<li><strong>AWS WAF Entegrasyonu:<\/strong> T\u00fcm CloudFront da\u011f\u0131t\u0131mlar\u0131n\u0131n \u00f6n\u00fcne bir AWS WAF Web ACL (Access Control List) eklendi. Bu Web ACL \u015funlar\u0131 i\u00e7eriyordu:\n<ul>\n<li><strong>AWS Managed Rule for Core Rule Set:<\/strong> OWASP Top 10 web a\u00e7\u0131klar\u0131na kar\u015f\u0131 temel koruma sa\u011flad\u0131.<\/li>\n<li><strong>Rate-based Rules:<\/strong> Belirli IP adreslerinden gelen a\u015f\u0131r\u0131 istekleri otomatik olarak engelledi, DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 ilk savunma hatt\u0131n\u0131 olu\u015fturdu. Her 5 dakikada 1000'den fazla istek yapan IP adresleri otomatik olarak bloke edildi.<\/li>\n<li><strong>Geo-blocking Rules:<\/strong> \u015eirketin hizmet sunmad\u0131\u011f\u0131 belirli \u00fclkelerden gelen trafi\u011fi engelledi. \u00d6zellikle k\u00f6t\u00fc niyetli trafi\u011fin yo\u011funla\u015ft\u0131\u011f\u0131 b\u00f6lgelerden gelen eri\u015fimi kesti.<\/li>\n<li><strong>Custom Rules:<\/strong> Belirli bot imzalar\u0131n\u0131 veya anormal HTTP ba\u015fl\u0131klar\u0131n\u0131 hedefleyen \u00f6zel kurallar yaz\u0131ld\u0131. \u00d6rne\u011fin, bilinen video ak\u0131\u015f korsanl\u0131\u011f\u0131 ara\u00e7lar\u0131n\u0131n imzalar\u0131n\u0131 i\u00e7eren istekler engellendi.<\/li>\n<\/ul>\n<\/li>\n<li><strong>Origin Shield Kullan\u0131m\u0131:<\/strong> Orjin sunucular\u0131na y\u00f6nelik y\u00fck\u00fc daha da azaltmak ve \u00f6nbellek isabet oranlar\u0131n\u0131 art\u0131rmak i\u00e7in t\u00fcm CloudFront da\u011f\u0131t\u0131mlar\u0131nda Origin Shield etkinle\u015ftirildi. Bu, \u00f6zellikle pop\u00fcler i\u00e7eriklere y\u00f6nelik yo\u011fun taleplerde orjin sunucular\u0131n\u0131n a\u015f\u0131r\u0131 y\u00fcklenmesini \u00f6nledi.<\/li>\n<li><strong>Lambda@Edge ile \u00d6zel Yetkilendirme:<\/strong> Premium video i\u00e7eriklerine eri\u015fim i\u00e7in, CloudFront'un <code>viewer-request<\/code> olay\u0131na bir Lambda@Edge fonksiyonu eklenerek \u00f6zel bir token do\u011frulama mekanizmas\u0131 uyguland\u0131. Bu fonksiyon, her istekte bir JWT (JSON Web Token) kontrol etti. Token ge\u00e7erli ve s\u00fcresi dolmam\u0131\u015fsa istek orjine iletildi, aksi takdirde 403 Forbidden yan\u0131t\u0131 d\u00f6nd\u00fcr\u00fcld\u00fc. Bu sayede, yaln\u0131zca abone olan ve ge\u00e7erli bir oturumu olan kullan\u0131c\u0131lar premium i\u00e7eri\u011fe eri\u015febildi.\n<pre><code class=\"language-javascript\">\n\/\/ Lambda@Edge \u00f6rnek kodu (sadece konsept)\nexports.handler = async (event) => {\n    const request = event.Records[0].cf.request;\n    const headers = request.headers;\n\n    \/\/ Check for authorization header and validate token\n    if (!headers['authorization'] || !isValidToken(headers['authorization'].value)) {\n        return {\n            statusCode: 403,\n            statusDescription: 'Forbidden',\n            body: 'Unauthorized'\n        };\n    }\n    return request;\n};\n\nfunction isValidToken(token) {\n    \/\/ Ger\u00e7ek token do\u011frulama mant\u0131\u011f\u0131 buraya gelecek\n    \/\/ \u00d6rne\u011fin, JWT'yi \u00e7\u00f6zme, imza do\u011frulama, s\u00fcre kontrol\u00fc vb.\n    return token === 'Bearer my-secret-jwt'; \n}\n        <\/pre>\n<p><\/code>\n    <\/li>\n<li><strong>HTTPS Zorunlulu\u011fu:<\/strong> T\u00fcm CloudFront da\u011f\u0131t\u0131mlar\u0131 i\u00e7in \"Redirect HTTP to HTTPS\" politikas\u0131 uyguland\u0131 ve ACM \u00fczerinden sa\u011flanan \u00fccretsiz SSL\/TLS sertifikalar\u0131 kullan\u0131ld\u0131. Orjin sunucular\u0131yla ileti\u015fim de sadece HTTPS \u00fczerinden yap\u0131ld\u0131, b\u00f6ylece u\u00e7tan uca \u015fifreleme sa\u011fland\u0131.<\/li>\n<\/ol>\n<h3>Sonu\u00e7 ve Kazan\u0131mlar<\/h3>\n<p>\nBu kapsaml\u0131 g\u00fcvenlik stratejilerinin uygulanmas\u0131 sonucunda medya \u015firketi, CloudFront orjinlerinin g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rd\u0131. Do\u011frudan orjin sunucular\u0131na y\u00f6nelik DDoS sald\u0131r\u0131lar\u0131 tamamen engellendi, yetkisiz S3 eri\u015fim giri\u015fimleri durduruldu ve premium i\u00e7eriklerin sadece yetkili abonelere sunulmas\u0131 sa\u011fland\u0131. WAF ve Origin Shield entegrasyonlar\u0131 sayesinde, orjin sunucular\u0131n\u0131n performans\u0131 iyile\u015ftirildi ve y\u00fcksek trafik anlar\u0131nda bile kesintisiz hizmet verilebildi. Bu vaka analizi, \u00e7ok katmanl\u0131 bir CloudFront orjin g\u00fcvenlik yakla\u015f\u0131m\u0131n\u0131n, modern web uygulamalar\u0131n\u0131n kar\u015f\u0131la\u015fabilece\u011fi karma\u015f\u0131k tehditlere kar\u015f\u0131 ne kadar etkili olabilece\u011fini a\u00e7\u0131k\u00e7a g\u00f6stermektedir.\n<\/p>\n<h2 style=\"font-size: 1.8em; margin-top: 2em; margin-bottom: 1em; color: #2c3e50;\">CloudFront Mobil Uyumlulu\u011fu Nas\u0131l Sa\u011flan\u0131r?<\/h2>\n<p>\nModern web'in vazge\u00e7ilmez bir par\u00e7as\u0131 olan mobil uyumluluk, kullan\u0131c\u0131 deneyimi ve SEO i\u00e7in kritik \u00f6neme sahiptir. CloudFront do\u011frudan bir \"mobil uyumlu HTML \u00fcretme\" servisi olmasa da, i\u00e7erik da\u011f\u0131t\u0131m\u0131 a\u015famas\u0131nda mobil uyumlu web uygulamalar\u0131n\u0131z\u0131 destekleyecek ve optimize edecek baz\u0131 \u00f6nemli noktalar bulunmaktad\u0131r. CloudFront'un kendisi, i\u00e7eri\u011finizi h\u0131zl\u0131 ve g\u00fcvenilir bir \u015fekilde mobil cihazlara ula\u015ft\u0131rarak dolayl\u0131 yoldan mobil deneyimi iyile\u015ftirir. Ancak as\u0131l mobil uyumluluk, web sitenizin veya uygulaman\u0131z\u0131n frontend geli\u015ftirme a\u015famas\u0131nda sa\u011flan\u0131r.\n<\/p>\n<h3>Responsive Tasar\u0131m \u0130lkeleri<\/h3>\n<p>\nMobil uyumlu bir web sitesi veya uygulama olu\u015fturman\u0131n temelinde responsive (duyarl\u0131) tasar\u0131m yatar. Bu yakla\u015f\u0131m, web sitenizin farkl\u0131 ekran boyutlar\u0131na ve cihazlara (masa\u00fcst\u00fc, tablet, mobil telefon) otomatik olarak uyum sa\u011flamas\u0131n\u0131 sa\u011flar. CSS'in <code>media queries<\/code> \u00f6zelli\u011fi, responsive tasar\u0131m\u0131n olmazsa olmaz\u0131d\u0131r.\n<\/p>\n<p>\nCloudFront, responsive web sitenizin CSS, JavaScript ve g\u00f6r\u00fcnt\u00fc dosyalar\u0131n\u0131 \u00f6nbelle\u011fe alarak ve d\u00fcnya \u00e7ap\u0131ndaki kenar konumlar\u0131ndan da\u011f\u0131tarak mobil cihazlara h\u0131zl\u0131 y\u00fckleme s\u00fcreleri sa\u011flar. Y\u00fcksek \u00e7\u00f6z\u00fcn\u00fcrl\u00fckl\u00fc g\u00f6rseller i\u00e7in CloudFront, \"Image Optimization\" \u00f6zelli\u011fini kullanarak veya Lambda@Edge ile dinamik boyutland\u0131rma yaparak mobil cihazlara uygun optimize edilmi\u015f g\u00f6rseller sunabilir. Bu sayede, mobil kullan\u0131c\u0131lar daha h\u0131zl\u0131 y\u00fcklenen ve bant geni\u015fli\u011finden tasarruf eden bir deneyim ya\u015farlar.\n<\/p>\n<p>\n\u0130\u015fte bir <code>media query<\/code> \u00f6rne\u011fi:\n<\/p>\n<pre><code class=\"language-css\">\n\/* Genel stil kurallar\u0131 *\/\nbody {\n    font-family: Arial, sans-serif;\n    margin: 0;\n    padding: 0;\n}\n\n.container {\n    width: 960px;\n    margin: 0 auto;\n    padding: 20px;\n}\n\n\/* Mobil cihazlar i\u00e7in media query (ekran geni\u015fli\u011fi 600px ve alt\u0131) *\/\n@media screen and (max-width: 600px) {\n    .container {\n        width: 100%; \/* Mobil cihazlarda tam geni\u015flik *\/\n        padding: 10px;\n    }\n\n    h2 {\n        font-size: 1.5em; \/* Mobil cihazlarda ba\u015fl\u0131k boyutunu k\u00fc\u00e7\u00fclt *\/\n    }\n\n    p {\n        font-size: 0.9em; \/* Mobil cihazlarda paragraf boyutunu k\u00fc\u00e7\u00fclt *\/\n    }\n}\n<\/pre>\n<p><\/code><\/p>\n<p>\nBu CSS kod blo\u011fu, bir web sayfas\u0131n\u0131n genel stilini tan\u0131mlar ve ard\u0131ndan <code>max-width: 600px<\/code> ko\u015fulunu kullanarak ekran geni\u015fli\u011fi 600 piksel ve alt\u0131nda olan cihazlar i\u00e7in farkl\u0131 stiller uygular. Bu sayede, sayfa mobil cihazlarda daha okunakl\u0131 ve kullan\u0131labilir hale gelir. CloudFront, bu t\u00fcr CSS dosyalar\u0131n\u0131 \u00f6nbelle\u011fe alarak ve kenar konumlar\u0131ndan h\u0131zla da\u011f\u0131tarak mobil cihazlara h\u0131zl\u0131 y\u00fckleme s\u00fcreleri sa\u011flar.\n<\/p>\n<p>\nHTML yap\u0131n\u0131z\u0131 da buna uygun olarak olu\u015fturman\u0131z \u00f6nemlidir. <code><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><\/code> etiketini HTML <code><head><\/code> k\u0131sm\u0131na eklemek, taray\u0131c\u0131ya sayfan\u0131n cihaz\u0131n geni\u015fli\u011fine g\u00f6re \u00f6l\u00e7eklenmesi gerekti\u011fini bildirir ve mobil uyumlulu\u011fun ilk ad\u0131m\u0131d\u0131r.\n<\/p>\n<pre><code class=\"language-html\">\n<!DOCTYPE html>\n<html lang=\"tr\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Mobil Uyumlu Sayfa<\/title>\n    <!-- Stil dosyan\u0131z buraya eklenecek -->\n    <link rel=\"stylesheet\" href=\"\/css\/styles.css\">\n<\/head>\n<body>\n    <div class=\"container\">\n        <h2>Mobil Uyumlu \u0130\u00e7erik<\/h2>\n        <p>Bu paragraf, farkl\u0131 ekran boyutlar\u0131na g\u00f6re kendini ayarlayacakt\u0131r.<\/p>\n    <\/div>\n<\/body>\n<\/html>\n<\/pre>\n<p><\/code><\/p>\n<h3>CloudFront ve Mobil Performans Optimizasyonu<\/h3>\n<p>\nCloudFront, mobil uygulamalar\u0131n ve web sitelerinin performans\u0131n\u0131 art\u0131rmak i\u00e7in bir dizi \u00f6zellik sunar:\n<\/p>\n<ul>\n<li><strong>K\u00fcresel Edge A\u011f\u0131:<\/strong> \u0130\u00e7eri\u011fi kullan\u0131c\u0131lara co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi (latency) azalt\u0131r. Bu, mobil a\u011flarda daha da \u00f6nemli hale gelir.<\/li>\n<li><strong>HTTP\/2 ve HTTP\/3 (QUIC) Deste\u011fi:<\/strong> Bu protokoller, birden \u00e7ok iste\u011fi tek bir ba\u011flant\u0131 \u00fczerinden g\u00f6ndererek ve ba\u015fl\u0131k s\u0131k\u0131\u015ft\u0131rma gibi tekniklerle mobil cihazlarda daha h\u0131zl\u0131 y\u00fckleme s\u00fcreleri sa\u011flar.<\/li>\n<li><strong>S\u0131k\u0131\u015ft\u0131rma (Compression):<\/strong> CloudFront, gzip veya Brotli gibi s\u0131k\u0131\u015ft\u0131rma algoritmalar\u0131 kullanarak metin tabanl\u0131 varl\u0131klar\u0131n (HTML, CSS, JS) boyutunu azalt\u0131r. Bu, \u00f6zellikle s\u0131n\u0131rl\u0131 bant geni\u015fli\u011fine sahip mobil a\u011flarda \u00f6nemli \u00f6l\u00e7\u00fcde h\u0131z art\u0131\u015f\u0131 sa\u011flar.<\/li>\n<li><strong>Cache Y\u00f6netimi:<\/strong> \u0130\u00e7eriklerinizi do\u011fru bir \u015fekilde \u00f6nbelle\u011fe alarak, mobil kullan\u0131c\u0131lar\u0131n tekrar eden ziyaretlerinde \u00e7ok daha h\u0131zl\u0131 y\u00fckleme s\u00fcreleri elde etmesini sa\u011flars\u0131n\u0131z. <code>Cache-Control<\/code> ba\u015fl\u0131klar\u0131n\u0131 do\u011fru yap\u0131land\u0131rmak kritik \u00f6neme sahiptir.<\/li>\n<\/ul>\n<p>\n\u00d6zetle, CloudFront do\u011frudan mobil uyumlu HTML \u00fcretmezken, mobil uyumlu bir web sitesinin veya uygulaman\u0131n d\u00fcnya \u00e7ap\u0131nda h\u0131zl\u0131, g\u00fcvenli ve verimli bir \u015fekilde da\u011f\u0131t\u0131lmas\u0131nda kilit bir rol oynar. Geli\u015ftirme a\u015famas\u0131nda responsive tasar\u0131m ilkelerini ve performans optimizasyonlar\u0131n\u0131 benimsemek, CloudFront ile birlikte m\u00fckemmel bir mobil deneyim sunman\u0131z\u0131 sa\u011flar.\n<\/p>\n<h2 style=\"font-size: 1.8em; margin-top: 2em; margin-bottom: 1em; color: #2c3e50;\">Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular<\/h2>\n<p>\nAmazon CloudFront, i\u00e7erik da\u011f\u0131t\u0131m\u0131nda h\u0131z, performans ve g\u00fcvenlik sunan g\u00fc\u00e7l\u00fc bir AWS hizmetidir. Ancak, CloudFront'un ger\u00e7ek potansiyelini ortaya \u00e7\u0131karmak ve web uygulamalar\u0131n\u0131z\u0131 siber tehditlere kar\u015f\u0131 tam anlam\u0131yla korumak, orjin sunucular\u0131n\u0131z\u0131n sa\u011flam bir \u015fekilde g\u00fcvence alt\u0131na al\u0131nmas\u0131na ba\u011fl\u0131d\u0131r. Bu makalede ele ald\u0131\u011f\u0131m\u0131z gibi, OAI\/OAC ile yetkisiz eri\u015fimi engellemek, AWS WAF ile yayg\u0131n web sald\u0131r\u0131lar\u0131na kar\u015f\u0131 kalkan olu\u015fturmak, HTTPS ile veri \u015fifrelemesini sa\u011flamak ve Lambda@Edge gibi geli\u015fmi\u015f \u00f6zelliklerle dinamik kontroller uygulamak, kapsaml\u0131 bir g\u00fcvenlik duru\u015fu i\u00e7in elzemdir.\n<\/p>\n<p>\nGer\u00e7ek d\u00fcnya senaryolar\u0131 ve vaka analizleri, bu g\u00fcvenlik katmanlar\u0131n\u0131n bir araya geldi\u011finde nas\u0131l g\u00fc\u00e7l\u00fc bir savunma olu\u015fturdu\u011funu g\u00f6stermektedir. Mobil uyumlulu\u011fun \u00f6nemini de g\u00f6z ard\u0131 etmeden, CloudFront'un sundu\u011fu optimizasyon yeteneklerinden faydalanarak kullan\u0131c\u0131lar\u0131n\u0131za h\u0131zl\u0131 ve g\u00fcvenli bir deneyim sunabilirsiniz. Unutmay\u0131n, g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir ve en iyi uygulamalar\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irmek ve uygulamak, web varl\u0131klar\u0131n\u0131z\u0131n gelecekte de g\u00fcvende kalmas\u0131n\u0131 sa\u011flayacakt\u0131r. AWS'nin sundu\u011fu bu entegre g\u00fcvenlik ara\u00e7lar\u0131 sayesinde, karma\u015f\u0131k siber g\u00fcvenlik zorluklar\u0131n\u0131 basitle\u015ftirebilir ve i\u015finize odaklanabilirsiniz.\n<\/p>\n<h3 style=\"font-size: 1.5em; margin-top: 1.5em; margin-bottom: 0.8em; color: #2c3e50;\">S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n<div style=\"margin-bottom: 1.5em;\">\n<h4 style=\"font-size: 1.2em; color: #2c3e50;\">CloudFront Orjin G\u00fcvenli\u011fi i\u00e7in OAI mi yoksa OAC mi kullanmal\u0131y\u0131m?<\/h4>\n<p>\n    Genellikle OAC (Origin Access Control) kullanman\u0131z \u00f6nerilir. OAC, OAI'ye g\u00f6re daha yeni, daha esnek ve daha g\u00fcvenli bir \u00e7\u00f6z\u00fcmd\u00fcr. Sadece S3 orjinleri i\u00e7in de\u011fil, EC2, ALB gibi di\u011fer HTTP\/HTTPS orjinleri i\u00e7in de \u00e7al\u0131\u015f\u0131r ve daha g\u00fc\u00e7l\u00fc \u015fifreleme ile denetim yetenekleri sunar. E\u011fer yeni bir da\u011f\u0131t\u0131m kuruyorsan\u0131z veya mevcut OAI'lerinizi g\u00fcncelliyorsan\u0131z, OAC'ye ge\u00e7i\u015f yapmal\u0131s\u0131n\u0131z.\n    <\/p>\n<\/div>\n<div style=\"margin-bottom: 1.5em;\">\n<h4 style=\"font-size: 1.2em; color: #2c3e50;\">AWS WAF, t\u00fcm DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar m\u0131?<\/h4>\n<p>\n    AWS WAF, \u00f6zellikle uygulama katman\u0131 (Layer 7) DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 etkili bir koruma sa\u011flar. H\u0131z tabanl\u0131 kurallar, co\u011frafi k\u0131s\u0131tlamalar ve bot korumas\u0131 gibi \u00f6zelliklerle bu t\u00fcr sald\u0131r\u0131lar\u0131 filtreler. Ancak, AWS Shield Advanced, daha geni\u015f kapsaml\u0131 ve otomatik DDoS korumas\u0131 sunan ek bir hizmettir ve daha b\u00fcy\u00fck, kritik uygulamalar i\u00e7in \u00f6nerilir. WAF, Shield Advanced ile birlikte kullan\u0131ld\u0131\u011f\u0131nda \u00e7ok daha g\u00fc\u00e7l\u00fc bir savunma sa\u011flar.\n    <\/p>\n<\/div>\n<div style=\"margin-bottom: 1.5em;\">\n<h4 style=\"font-size: 1.2em; color: #2c3e50;\">Lambda@Edge kullanmak performans\u0131 nas\u0131l etkiler?<\/h4>\n<p>\n    Lambda@Edge fonksiyonlar\u0131, CloudFront'un kenar konumlar\u0131nda \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in genellikle d\u00fc\u015f\u00fck gecikme s\u00fcresi sunar. Ancak, fonksiyonunuzun karma\u015f\u0131kl\u0131\u011f\u0131, \u00e7al\u0131\u015fma s\u00fcresi ve harici \u00e7a\u011fr\u0131lar yap\u0131p yapmad\u0131\u011f\u0131 performans\u0131 etkileyebilir. Basit ve h\u0131zl\u0131 \u00e7al\u0131\u015fan fonksiyonlar i\u00e7in etkisi ihmal edilebilir d\u00fczeydeyken, uzun s\u00fcren veya yo\u011fun i\u015flem gerektiren fonksiyonlar yan\u0131t s\u00fcrelerini art\u0131rabilir. CloudFront Functions, daha basit ve daha h\u0131zl\u0131 i\u015flevler i\u00e7in tasarlanm\u0131\u015ft\u0131r ve performansa daha az etki eder.\n    <\/p>\n<\/div>\n<div style=\"margin-bottom: 1.5em;\">\n<h4 style=\"font-size: 1.2em; color: #2c3e50;\">CloudFront ile bir web sitesini tamamen g\u00fcvende tutmak m\u00fcmk\u00fcn m\u00fcd\u00fcr?<\/h4>\n<p>\n    CloudFront, orjin g\u00fcvenli\u011fini art\u0131rmak ve i\u00e7eri\u011fi siber tehditlere kar\u015f\u0131 korumak i\u00e7in \u00e7ok g\u00fc\u00e7l\u00fc ara\u00e7lar sunar. Ancak, hi\u00e7bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc %100 garanti vermez. G\u00fcvenlik, \u00e7ok katmanl\u0131 bir yakla\u015f\u0131md\u0131r ve CloudFront ile birlikte orjin sunucunuzun kendi i\u015fletim sistemi\/uygulama g\u00fcvenli\u011fini, veri taban\u0131 g\u00fcvenli\u011fini ve genel AWS hesap g\u00fcvenli\u011fi en iyi uygulamalar\u0131n\u0131 da sa\u011flaman\u0131z gerekir. Bu kombinasyon, web sitenizi ve uygulaman\u0131z\u0131 en \u00fcst d\u00fczeyde g\u00fcvende tutman\u0131za yard\u0131mc\u0131 olacakt\u0131r.\n    <\/p>\n<\/div>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Amazon CloudFront orjinlerinizi entegre AWS g\u00fcvenlik \u00f6zellikleriyle nas\u0131l koruyaca\u011f\u0131n\u0131z\u0131 \u00f6\u011frenin. OAI, OAC, AWS WAF gibi ara\u00e7larla i\u00e7erik da\u011f\u0131t\u0131m&hellip;","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-32783","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz...<\/title>\n<meta name=\"description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN&#039;ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan &quot;orjin sunucular\u0131&quot; do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz...\" \/>\n<meta property=\"og:description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN&#039;ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan &quot;orjin sunucular\u0131&quot; do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-25T20:01:24+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"26 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz&#8230;\",\"datePublished\":\"2025-10-25T20:01:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\"},\"wordCount\":4854,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\",\"name\":\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz...\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-25T20:01:24+00:00\",\"description\":\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN'ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan \\\"orjin sunucular\u0131\\\" do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz&#8230;\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz...","description":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN'ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan \"orjin sunucular\u0131\" do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/","og_locale":"tr_TR","og_type":"article","og_title":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz...","og_description":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN'ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan \"orjin sunucular\u0131\" do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.","og_url":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-25T20:01:24+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"26 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz&#8230;","datePublished":"2025-10-25T20:01:24+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/"},"wordCount":4854,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/","url":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/","name":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz...","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-25T20:01:24+00:00","description":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha fazla kullan\u0131c\u0131ya ula\u015fmaktad\u0131r. Bu eri\u015filebilirli\u011fin temelinde, h\u0131zl\u0131 ve g\u00fcvenilir i\u00e7erik da\u011f\u0131t\u0131m\u0131 sa\u011flayan \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011flar\u0131 (CDN'ler) yer al\u0131r. Amazon CloudFront, AWS ekosisteminin g\u00fc\u00e7l\u00fc bir par\u00e7as\u0131 olarak bu ihtiyac\u0131 kar\u015f\u0131lar; ancak, bir CDN kullanman\u0131n getirdi\u011fi faydalar\u0131n yan\u0131 s\u0131ra, g\u00fcvenlik endi\u015feleri de beraberinde gelir. CloudFront, kullan\u0131c\u0131lar\u0131n\u0131za i\u00e7eri\u011fi co\u011frafi olarak yak\u0131n sunuculardan ula\u015ft\u0131rarak gecikmeyi azalt\u0131r ve performans\u0131 art\u0131r\u0131rken, i\u00e7eri\u011fin ger\u00e7ek kayna\u011f\u0131 olan \"orjin sunucular\u0131\" do\u011frudan internete a\u00e7\u0131k kalabilme riski ta\u015f\u0131r. \u0130\u015fte tam da bu noktada orjin g\u00fcvenli\u011fi devreye girer.","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/gunumuzun-dijital-dunyasinda-web-uygulamalari-ve-dinamik-icerikler-her-zamankinden-daha-faz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, web uygulamalar\u0131 ve dinamik i\u00e7erikler her zamankinden daha faz&#8230;"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32783","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=32783"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32783\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=32783"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=32783"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=32783"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}