{"id":37211,"date":"2025-12-28T23:30:37","date_gmt":"2025-12-28T20:30:37","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/"},"modified":"2025-12-28T23:30:37","modified_gmt":"2025-12-28T20:30:37","slug":"awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/","title":{"rendered":"AWS’te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber"},"content":{"rendered":"

AWS’te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber<\/h2>\n

G\u00fcn\u00fcm\u00fcz\u00fcn bulut tabanl\u0131 altyap\u0131lar\u0131nda, \u00f6zellikle AWS gibi dinamik ve geni\u015f \u00f6l\u00e7ekli ortamlarda g\u00fcvenlik, en kritik \u00f6nceliklerden biridir. \u0130\u00e7 a\u011f kaynaklar\u0131na g\u00fcvenli eri\u015fim sa\u011flamak, siber sald\u0131r\u0131lara kar\u015f\u0131 korunmak ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flamak i\u00e7in sa\u011flam bir stratejiye ihtiya\u00e7 duyar\u0131z. Bu makale, AWS \u00fczerinde g\u00fcvenli bir bastion host mimarisini ad\u0131m ad\u0131m nas\u0131l in\u015fa edece\u011finizi, temel bile\u015fenlerini, en iyi uygulamalar\u0131n\u0131 ve modern alternatiflerini detayl\u0131 bir \u015fekilde a\u00e7\u0131klayacakt\u0131r. Amac\u0131m\u0131z, AWS ortam\u0131n\u0131zdaki \u00f6zel kaynaklara eri\u015fimi merkezi ve denetlenebilir bir noktadan sa\u011flayarak g\u00fcvenlik duru\u015funuzu g\u00fc\u00e7lendirmektir.<\/p>\n

Bastion Host Nedir ve Neden \u00d6nemlidir?<\/h3>\n

Bir\u00e7ok kurulu\u015f, bulut ortamlar\u0131ndaki \u00f6zel sunucular\u0131na g\u00fcvenli bir \u015fekilde eri\u015fmekte zorlanabilir. Bu eri\u015fim noktalar\u0131n\u0131n do\u011fru yap\u0131land\u0131r\u0131lmas\u0131, genel g\u00fcvenlik stratejisinin temelini olu\u015fturur.<\/p>\n

Bastion Host’un Tan\u0131m\u0131<\/h4>\n

Bir bastion host (veya jump server), \u00f6zel a\u011flarda (private subnets) bulunan sunuculara veya di\u011fer kaynaklara g\u00fcvenli bir \u015fekilde eri\u015fmek i\u00e7in kullan\u0131lan \u00f6zel ama\u00e7l\u0131 bir sunucudur. Genellikle bir genel alt a\u011fda (public subnet) bulunur ve yaln\u0131zca belirli IP adreslerinden gelen SSH (Secure Shell) veya RDP (Remote Desktop Protocol) trafi\u011fine izin verir. Bir nevi g\u00fcvenlik duvar\u0131 g\u00f6revi g\u00f6rerek i\u00e7 a\u011f ile d\u0131\u015f d\u00fcnya aras\u0131nda tek bir giri\u015f noktas\u0131 olu\u015fturur. Bu merkezi nokta, t\u00fcm eri\u015fim denemelerinin kaydedilmesini ve izlenmesini kolayla\u015ft\u0131r\u0131r.<\/p>\n

Neden Bir Bastion Host’a \u0130htiya\u00e7 Duyar\u0131z?<\/h4>\n

Do\u011frudan internete a\u00e7\u0131k \u00f6zel sunucular, sald\u0131r\u0131lara kar\u015f\u0131 savunmas\u0131zd\u0131r. Bastion host, bu sunucular\u0131n do\u011frudan internete maruz kalmas\u0131n\u0131 engelleyerek sald\u0131r\u0131 y\u00fczeyini daralt\u0131r. T\u00fcm eri\u015fim tek bir nokta \u00fczerinden ge\u00e7ti\u011fi i\u00e7in, bu noktadaki g\u00fcvenlik \u00f6nlemlerini art\u0131rmak ve t\u00fcm ba\u011flant\u0131lar\u0131 denetlemek \u00e7ok daha kolay hale gelir. Bu, \u00f6zellikle uyumluluk gereksinimleri olan (PCI DSS, HIPAA vb.) ortamlar i\u00e7in hayati \u00f6neme sahiptir. Ayr\u0131ca, geli\u015ftiricilerin veya sistem y\u00f6neticilerinin i\u00e7 a\u011fdaki kaynaklara eri\u015fimini standartla\u015ft\u0131r\u0131r ve merkezi bir kontrol sa\u011flar.<\/p>\n

Geleneksel Yakla\u015f\u0131mlar\u0131n G\u00fcvenlik A\u00e7\u0131klar\u0131<\/h4>\n

Bir\u00e7ok kurulu\u015f, \u00f6zel sunucular\u0131na do\u011frudan SSH eri\u015fimine izin vermek i\u00e7in g\u00fcvenlik gruplar\u0131n\u0131 veya A\u011f Eri\u015fim Kontrol Listelerini (NACL’ler) yanl\u0131\u015f yap\u0131land\u0131rabilir. Bu durum, potansiyel olarak k\u00f6t\u00fc niyetli akt\u00f6rlerin sunuculara s\u0131zmas\u0131na yol a\u00e7abilir. Her sunucuya ayr\u0131 ayr\u0131 eri\u015fim kontrol\u00fc uygulamak ve denetlemek y\u00f6netimsel bir kabusa d\u00f6n\u00fc\u015febilir. Ayr\u0131ca, her sunucunun kendi g\u00fcvenlik yamalar\u0131n\u0131n ve g\u00fcncellemelerinin takibi zorla\u015f\u0131r. Bastion host, bu da\u011f\u0131n\u0131kl\u0131\u011f\u0131 ortadan kald\u0131rarak merkezi bir kontrol noktas\u0131 sunar ve y\u00f6netim y\u00fck\u00fcn\u00fc azalt\u0131r.<\/p>\n

G\u00fcvenli Bastion Host Mimarisi Temel Bile\u015fenleri<\/h3>\n

Etkili bir bastion host mimarisi, AWS’in \u00e7e\u015fitli g\u00fcvenlik servislerini bir araya getirerek olu\u015fturulur.<\/p>\n

VPC ve Alt A\u011f Yap\u0131land\u0131rmas\u0131<\/h4>\n

Bastion host’unuzu bar\u0131nd\u0131raca\u011f\u0131n\u0131z bir Sanal \u00d6zel Bulut (VPC) olu\u015fturmakla i\u015fe ba\u015flay\u0131n. VPC i\u00e7inde, bastion host i\u00e7in bir genel alt a\u011f (public subnet) ve \u00f6zel kaynaklar\u0131n\u0131z i\u00e7in bir veya daha fazla \u00f6zel alt a\u011f (private subnet) tan\u0131mlay\u0131n. Genel alt a\u011f, bir \u0130nternet A\u011f Ge\u00e7idi (Internet Gateway) arac\u0131l\u0131\u011f\u0131yla internete eri\u015febilirken, \u00f6zel alt a\u011flar yaln\u0131zca bir NAT A\u011f Ge\u00e7idi (NAT Gateway) veya VPC Endpoint’ler arac\u0131l\u0131\u011f\u0131yla d\u0131\u015f d\u00fcnya ile ileti\u015fim kurmal\u0131d\u0131r. Bu ayr\u0131m, g\u00fcvenlik katmanlar\u0131n\u0131 olu\u015fturman\u0131n ilk ad\u0131m\u0131d\u0131r.<\/p>\n

G\u00fcvenlik Gruplar\u0131 ve A\u011f Eri\u015fim Kontrol Listeleri (NACL’ler)<\/h4>\n

G\u00fcvenlik gruplar\u0131 ve NACL’ler, a\u011f trafi\u011fini filtrelemek i\u00e7in temel ara\u00e7lard\u0131r. Bastion host i\u00e7in bir g\u00fcvenlik grubu olu\u015fturun ve yaln\u0131zca belirli g\u00fcvenilir IP adreslerinden (\u00f6rne\u011fin, \u015firket VPN IP’si) SSH (port 22) veya RDP (port 3389) trafi\u011fine izin verin. \u00d6zel alt a\u011fdaki sunucular i\u00e7in ise, yaln\u0131zca bastion host’un g\u00fcvenlik grubundan gelen SSH\/RDP trafi\u011fine izin veren ayr\u0131 bir g\u00fcvenlik grubu tan\u0131mlay\u0131n. NACL’ler ise alt a\u011f d\u00fczeyinde ek bir g\u00fcvenlik katman\u0131 sa\u011flar ve daha geni\u015f trafik filtreleme kurallar\u0131 uygulaman\u0131za olanak tan\u0131r.<\/p>\n

\u00d6rnek G\u00fcvenlik Grubu Kurallar\u0131:<\/strong><\/p>\n\n\n\n\n\n\n\n\n
G\u00fcvenlik Grubu<\/th>\nY\u00f6n<\/th>\nTip<\/th>\nProtokol<\/th>\nPort Aral\u0131\u011f\u0131<\/th>\nKaynak\/Hedef<\/th>\nA\u00e7\u0131klama<\/th>\n<\/tr>\n<\/thead>\n
Bastion Host SG<\/td>\nGelen (Inbound)<\/td>\nSSH<\/td>\nTCP<\/td>\n22<\/td>\nYourOfficeIP\/32<\/code><\/td>\nOfis IP’sinden SSH eri\u015fimi<\/td>\n<\/tr>\n
Bastion Host SG<\/td>\nGiden (Outbound)<\/td>\nT\u00fcm\u00fc<\/td>\nT\u00fcm\u00fc<\/td>\nT\u00fcm\u00fc<\/td>\n0.0.0.0\/0<\/code><\/td>\n\u0130nternete giden t\u00fcm trafik<\/td>\n<\/tr>\n
\u00d6zel Sunucu SG<\/td>\nGelen (Inbound)<\/td>\nSSH<\/td>\nTCP<\/td>\n22<\/td>\nBastionHostSG_ID<\/code><\/td>\nBastion Host’tan SSH eri\u015fimi<\/td>\n<\/tr>\n
\u00d6zel Sunucu SG<\/td>\nGiden (Outbound)<\/td>\nT\u00fcm\u00fc<\/td>\nT\u00fcm\u00fc<\/td>\nT\u00fcm\u00fc<\/td>\n0.0.0.0\/0<\/code><\/td>\n\u0130nternete giden t\u00fcm trafik (NAT GW \u00fczerinden)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

IAM Rolleri ve Politikalar\u0131<\/h4>\n

Bastion host’unuzun AWS servisleriyle etkile\u015fime girmesi gerekiyorsa (\u00f6rne\u011fin, loglar\u0131 CloudWatch’a g\u00f6ndermek i\u00e7in), ona uygun IAM (Identity and Access Management) rolleri atay\u0131n. Bu roller, en az ayr\u0131cal\u0131k ilkesine (least privilege) uygun olarak yaln\u0131zca ihtiya\u00e7 duyulan izinleri i\u00e7ermelidir. Kullan\u0131c\u0131lar\u0131n bastion host’a eri\u015fimi i\u00e7in ise IAM kullan\u0131c\u0131lar\u0131 olu\u015fturun ve SSH anahtar y\u00f6netimini merkezi hale getirin. IAM politikalar\u0131, kimlerin hangi kaynaklara eri\u015febilece\u011fini detayl\u0131 bir \u015fekilde kontrol etmenizi sa\u011flar.<\/p>\n

EC2 Instance Yap\u0131land\u0131rmas\u0131<\/h4>\n

Bastion host olarak kullanaca\u011f\u0131n\u0131z EC2 instance’\u0131 i\u00e7in g\u00fcvenli bir i\u015fletim sistemi (\u00f6rne\u011fin, Amazon Linux 2 veya Ubuntu LTS) se\u00e7in. Instance’\u0131 olu\u015ftururken, yeterli CPU ve belle\u011fe sahip oldu\u011fundan emin olun, ancak a\u015f\u0131r\u0131 kaynak tahsisinden ka\u00e7\u0131n\u0131n. G\u00fcvenlik i\u00e7in, instance’\u0131n SSH anahtar\u0131n\u0131 dikkatlice y\u00f6netin ve d\u00fczenli olarak g\u00fcncelleyin. Ayr\u0131ca, instance’\u0131n otomatik g\u00fcncelleme ve yama mekanizmalar\u0131na sahip oldu\u011fundan emin olun.<\/p>\n

AWS’te Bastion Host Kurulumu: Ad\u0131m Ad\u0131m Rehber<\/h3>\n

\u015eimdi, AWS konsolu veya CLI kullanarak bastion host’u nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m inceleyelim.<\/p>\n

VPC ve Alt A\u011f Olu\u015fturma<\/h4>\n

\u0130lk olarak, AWS konsolunda VPC servisine gidin ve yeni bir VPC olu\u015fturun. Ard\u0131ndan, bu VPC i\u00e7inde bir genel alt a\u011f (bastion host i\u00e7in) ve bir \u00f6zel alt a\u011f (i\u00e7 kaynaklar i\u00e7in) olu\u015fturun. Genel alt a\u011fa bir \u0130nternet A\u011f Ge\u00e7idi ekleyin ve rota tablosunu g\u00fcncelleyerek internete eri\u015fim sa\u011flay\u0131n. \u00d6zel alt a\u011f\u0131n rota tablosu ise bir NAT A\u011f Ge\u00e7idi’ne i\u015faret etmelidir.<\/p>\n

G\u00fcvenlik Gruplar\u0131n\u0131 Yap\u0131land\u0131rma<\/h4>\n

Yukar\u0131daki tabloda belirtildi\u011fi gibi, bastion host i\u00e7in bir g\u00fcvenlik grubu (\u00f6rne\u011fin, BastionHost-SG<\/code>) ve \u00f6zel sunucular\u0131n\u0131z i\u00e7in ba\u015fka bir g\u00fcvenlik grubu (\u00f6rne\u011fin, PrivateServers-SG<\/code>) olu\u015fturun. BastionHost-SG<\/code> i\u00e7in, yaln\u0131zca ofisinizin veya g\u00fcvenilir IP aral\u0131\u011f\u0131n\u0131z\u0131n SSH portuna (22) eri\u015fmesine izin veren bir gelen kural\u0131 ekleyin. PrivateServers-SG<\/code> i\u00e7in ise, yaln\u0131zca BastionHost-SG<\/code>‘den gelen SSH trafi\u011fine izin veren bir gelen kural\u0131 ekleyin.<\/p>\n

EC2 Bastion Host Olu\u015fturma<\/h4>\n

EC2 konsoluna gidin ve “Launch Instance” se\u00e7ene\u011fini t\u0131klay\u0131n.<\/p>\n

    \n
  1. AMI Se\u00e7imi:<\/strong> G\u00fcvenli bir Linux AMI (\u00f6rne\u011fin, Amazon Linux 2) se\u00e7in.<\/li>\n
  2. Instance Tipi:<\/strong> T2.micro veya T3.micro gibi k\u00fc\u00e7\u00fck bir instance tipi genellikle yeterlidir.<\/li>\n
  3. A\u011f Yap\u0131land\u0131rmas\u0131:<\/strong> Olu\u015fturdu\u011funuz VPC’yi ve genel alt a\u011f\u0131 se\u00e7in. Otomatik genel IP atamas\u0131n\u0131 etkinle\u015ftirin.<\/li>\n
  4. G\u00fcvenlik Grubu:<\/strong> Olu\u015fturdu\u011funuz BastionHost-SG<\/code>‘yi se\u00e7in.<\/li>\n
  5. Anahtar \u00c7ifti:<\/strong> Yeni bir anahtar \u00e7ifti olu\u015fturun veya mevcut bir anahtar \u00e7iftini kullan\u0131n. \u00d6zel anahtar dosyas\u0131n\u0131 (.pem) g\u00fcvenli bir yerde saklay\u0131n.<\/li>\n<\/ol>\n

    Instance’\u0131 ba\u015flatt\u0131ktan sonra, bir Elastic IP atayarak kal\u0131c\u0131 bir genel IP adresi sa\u011flayabilirsiniz.<\/p>\n

    SSH Anahtar Y\u00f6netimi ve Ba\u011flant\u0131 Kurma<\/h4>\n

    SSH anahtarlar\u0131n\u0131z\u0131 g\u00fcvenli bir \u015fekilde y\u00f6netmek \u00e7ok \u00f6nemlidir. Her kullan\u0131c\u0131 i\u00e7in ayr\u0131 anahtar \u00e7iftleri kullan\u0131n ve bunlar\u0131 d\u00fczenli olarak de\u011fi\u015ftirin.
    \nBastion host’a ba\u011flanmak i\u00e7in terminalinizde a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n

    \nssh -i \/path\/to\/your-key.pem ec2-user@\n<\/pre>\n
    <\/code>
    \nBastion host \u00fczerinden \u00f6zel sunucunuza ba\u011flanmak i\u00e7in ise SSH Agent Forwarding kullanman\u0131z \u00f6nerilir. Bu, \u00f6zel anahtar\u0131n\u0131z\u0131n bastion host'a kopyalanmas\u0131n\u0131 engeller:<\/p>\n
    \n# Terminal 1: SSH Agent'\u0131 ba\u015flat\u0131n ve anahtar\u0131n\u0131z\u0131 ekleyin\neval \"$(ssh-agent -s)\"\nssh-add \/path\/to\/your-key.pem\n\n# Terminal 2: Bastion host \u00fczerinden \u00f6zel sunucuya ba\u011flan\u0131n\nssh -A ec2-user@\nssh ec2-user@\n<\/pre>\n
    <\/code><\/p>\n
    G\u00fcvenli\u011fi Art\u0131r\u0131c\u0131 Ek \u00d6nlemler<\/h3>\n
    Bastion host'unuzun g\u00fcvenli\u011fini daha da sa\u011flamla\u015ft\u0131rmak i\u00e7in ek ad\u0131mlar atabilirsiniz.<\/p>\n
    Multi-Factor Authentication (MFA) Kullan\u0131m\u0131<\/h4>\n
    Bastion host'a eri\u015fim i\u00e7in MFA kullanmak, kimlik do\u011frulama s\u00fcrecine ek bir g\u00fcvenlik katman\u0131 ekler. Bu, SSH anahtar\u0131n\u0131z\u0131n \u00e7al\u0131nmas\u0131 durumunda bile yetkisiz eri\u015fimi engellemeye yard\u0131mc\u0131 olur. AWS IAM kullan\u0131c\u0131lar\u0131n\u0131z i\u00e7in MFA'y\u0131 etkinle\u015ftirin ve SSH eri\u015fimi i\u00e7in pam_google_authenticator gibi \u00e7\u00f6z\u00fcmleri bastion host \u00fczerinde yap\u0131land\u0131rabilirsiniz.<\/p>\n
    Just-in-Time (JIT) Eri\u015fim Modelleri<\/h4>\n
    S\u00fcrekli eri\u015fim yerine, kullan\u0131c\u0131lara yaln\u0131zca belirli bir s\u00fcre i\u00e7in (\u00f6rne\u011fin, 30 dakika) eri\u015fim izni veren Just-in-Time (JIT) eri\u015fim modellerini uygulay\u0131n. Bu, yetkisiz eri\u015fim penceresini \u00f6nemli \u00f6l\u00e7\u00fcde daralt\u0131r. AWS Lambda ve IAM kullanarak JIT eri\u015fim mekanizmalar\u0131 olu\u015fturabilir veya \u00fc\u00e7\u00fcnc\u00fc taraf \u00e7\u00f6z\u00fcmlerden yararlanabilirsiniz.<\/p>\n
    Audit ve Loglama (CloudTrail, VPC Flow Logs)<\/h4>\n
    T\u00fcm eri\u015fim denemelerini ve bastion host \u00fczerindeki etkinlikleri kapsaml\u0131 bir \u015fekilde loglay\u0131n. AWS CloudTrail, API \u00e7a\u011fr\u0131lar\u0131n\u0131 kaydederken, VPC Flow Logs a\u011f trafi\u011fi detaylar\u0131n\u0131 yakalar. Bastion host'un i\u015fletim sistemi loglar\u0131n\u0131 (\u00f6rne\u011fin, auth.log<\/code> veya secure<\/code> loglar\u0131) merkezi bir loglama sistemine (\u00f6rne\u011fin, CloudWatch Logs, Splunk) g\u00f6ndererek izlenebilirli\u011fi art\u0131r\u0131n. Bu loglar, g\u00fcvenlik olaylar\u0131n\u0131n incelenmesi ve adli analizler i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n
    Otomatik Yama ve G\u00fcncelleme<\/h4>\n
    Bastion host'unuzun i\u015fletim sistemi ve kurulu yaz\u0131l\u0131mlar\u0131n\u0131n her zaman g\u00fcncel oldu\u011fundan emin olun. AWS Systems Manager Patch Manager gibi servisleri kullanarak otomatik yama uygulama politikalar\u0131 olu\u015fturabilir veya cron i\u015fleri ile d\u00fczenli g\u00fcncelleme scriptleri \u00e7al\u0131\u015ft\u0131rabilirsiniz. G\u00fcncel olmayan yaz\u0131l\u0131mlar, bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 savunmas\u0131z kalman\u0131za neden olabilir.<\/p>\n
    Alternatifler ve Modern Yakla\u015f\u0131mlar<\/h3>\n
    Geleneksel bastion host modelinin baz\u0131 s\u0131n\u0131rlamalar\u0131 vard\u0131r. AWS, bu s\u0131n\u0131rlamalar\u0131 a\u015fan modern \u00e7\u00f6z\u00fcmler sunar.<\/p>\n
    AWS Systems Manager Session Manager<\/h4>\n
    Session Manager, EC2 instance'lar\u0131n\u0131za SSH anahtarlar\u0131na ihtiya\u00e7 duymadan, hatta geleneksel SSH portunu a\u00e7madan g\u00fcvenli ve denetlenebilir bir \u015fekilde eri\u015fmenizi sa\u011flayan harika bir alternatiftir. Tamamen AWS konsolu, CLI veya SDK \u00fczerinden \u00e7al\u0131\u015f\u0131r ve t\u00fcm oturumlar\u0131 loglayabilir. Session Manager, bir bastion host'un y\u00f6netim y\u00fck\u00fcn\u00fc ortadan kald\u0131r\u0131r ve Zero Trust ilkelerine daha yak\u0131nd\u0131r.<\/p>\n
    Session Manager'\u0131n Avantajlar\u0131:<\/strong><\/p>\n
      \n
    • SSH anahtar\u0131 y\u00f6netimine gerek yok.<\/li>\n
    • G\u00fcvenlik grubunda SSH portu a\u00e7maya gerek yok.<\/li>\n
    • T\u00fcm oturumlar denetlenebilir ve loglanabilir.<\/li>\n
    • IAM politikalar\u0131 ile ayr\u0131nt\u0131l\u0131 eri\u015fim kontrol\u00fc.<\/li>\n
    • EC2 instance'lar\u0131n\u0131n genel IP'ye ihtiyac\u0131 yok.<\/li>\n<\/ul>\n
      AWS Client VPN<\/h4>\n
      AWS Client VPN, kullan\u0131c\u0131lar\u0131n AWS kaynaklar\u0131na g\u00fcvenli bir \u015fekilde eri\u015fmesini sa\u011flayan, tam olarak y\u00f6netilen bir VPN hizmetidir. Kullan\u0131c\u0131lar, VPN istemcisini kullanarak AWS VPC'nize ba\u011flan\u0131r ve ard\u0131ndan \u00f6zel alt a\u011flardaki kaynaklara eri\u015febilir. Bu, bastion host'a bir alternatif olabilir, ancak t\u00fcm kullan\u0131c\u0131lar\u0131n VPN istemcisini yap\u0131land\u0131rmas\u0131n\u0131 gerektirir ve y\u00f6netimsel ek y\u00fck getirebilir.<\/p>\n
      Zero Trust Yakla\u015f\u0131mlar\u0131<\/h4>\n
      Zero Trust (S\u0131f\u0131r G\u00fcven) mimarisi, \"hi\u00e7bir zaman g\u00fcvenme, her zaman do\u011frula\" prensibine dayan\u0131r. Bu yakla\u015f\u0131mda, a\u011f i\u00e7inde veya d\u0131\u015f\u0131nda olsalar bile hi\u00e7bir kullan\u0131c\u0131 veya cihaz otomatik olarak g\u00fcvenilir kabul edilmez. Bastion host ve Session Manager gibi ara\u00e7lar, Zero Trust ilkelerini uygulaman\u0131n bir par\u00e7as\u0131 olabilir. Her eri\u015fim iste\u011fi, kimlik, ba\u011flam ve en az ayr\u0131cal\u0131k ilkesi temelinde do\u011frulan\u0131r.<\/p>\n
      Y\u00f6netim ve Bak\u0131m \u0130pu\u00e7lar\u0131<\/h3>\n
      Bir bastion host mimarisi kurmak sadece ba\u015flang\u0131\u00e7t\u0131r; s\u00fcrekli y\u00f6netim ve bak\u0131m, g\u00fcvenli\u011fin s\u00fcrd\u00fcr\u00fclebilirli\u011fi i\u00e7in esast\u0131r.<\/p>\n
      D\u00fczenli G\u00fcvenlik Denetimleri<\/h4>\n
      Bastion host'unuzun ve ilgili g\u00fcvenlik gruplar\u0131n\u0131n yap\u0131land\u0131rmas\u0131n\u0131 d\u00fczenli olarak denetleyin. G\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 taramak i\u00e7in otomatik ara\u00e7lar (\u00f6rne\u011fin, AWS Security Hub, Amazon Inspector) kullan\u0131n. IAM politikalar\u0131n\u0131 ve kullan\u0131c\u0131 eri\u015fimlerini periyodik olarak g\u00f6zden ge\u00e7irin ve gereksiz izinleri kald\u0131r\u0131n.<\/p>\n
      Otomasyon ve Scripting<\/h4>\n
      Bastion host'un kurulumunu ve y\u00f6netimini otomatikle\u015ftirmek i\u00e7in AWS CloudFormation, Terraform veya Ansible gibi ara\u00e7lar\u0131 kullan\u0131n. Bu, tutarl\u0131l\u0131\u011f\u0131 sa\u011flar, insan hatas\u0131n\u0131 azalt\u0131r ve h\u0131zl\u0131 bir \u015fekilde yeni bastion host'lar\u0131 devreye alman\u0131za veya mevcutlar\u0131 g\u00fcncellemenize olanak tan\u0131r.<\/p>\n
      Yedekleme ve Felaket Kurtarma<\/h4>\n
      Bastion host'unuzun bir ar\u0131za durumunda h\u0131zla kurtar\u0131labilmesi i\u00e7in bir yedekleme ve felaket kurtarma stratejisi belirleyin. Instance'\u0131n AMI'sini d\u00fczenli olarak olu\u015fturabilir veya bir \"golden AMI\" kullanarak h\u0131zl\u0131ca yeni bir instance ba\u015flatabilirsiniz. Birden fazla Availability Zone'da yedekli bastion host'lar da\u011f\u0131tarak y\u00fcksek eri\u015filebilirlik sa\u011flay\u0131n.<\/p>\n
      Sonu\u00e7<\/h3>\n
      AWS'te g\u00fcvenli bir bastion host mimarisi olu\u015fturmak, \u00f6zel a\u011f kaynaklar\u0131n\u0131za g\u00fcvenli ve denetlenebilir eri\u015fim sa\u011flaman\u0131n kritik bir ad\u0131m\u0131d\u0131r. Bu rehberde ele ald\u0131\u011f\u0131m\u0131z ad\u0131mlar\u0131 ve en iyi uygulamalar\u0131 takip ederek, sald\u0131r\u0131 y\u00fczeyinizi daraltabilir, eri\u015fim kontrol\u00fcn\u00fc merkezile\u015ftirebilir ve genel g\u00fcvenlik duru\u015funuzu \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirebilirsiniz. Unutmay\u0131n ki g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir; d\u00fczenli denetimler, g\u00fcncellemeler ve modern yakla\u015f\u0131mlara (\u00f6zellikle AWS Systems Manager Session Manager gibi) adapte olmak, altyap\u0131n\u0131z\u0131n uzun vadeli g\u00fcvenli\u011fini sa\u011flaman\u0131n anahtar\u0131d\u0131r. G\u00fcvenli bir bulut ortam\u0131, i\u015f s\u00fcreklili\u011fi ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fc i\u00e7in vazge\u00e7ilmezdir.<\/p>\n
      SSS (S\u0131k Sorulan Sorular)<\/h3>\n
      Bastion host'u public IP ile mi kurmal\u0131y\u0131m?<\/h4>\n
      Evet, geleneksel bir bastion host, genel alt a\u011fda bulunur ve internetten eri\u015filebilir olmas\u0131 i\u00e7in bir genel IP adresine (veya bir Elastic IP'ye) sahip olmal\u0131d\u0131r. Ancak, eri\u015fimi yaln\u0131zca belirli g\u00fcvenilir IP aral\u0131klar\u0131yla s\u0131n\u0131rlamal\u0131s\u0131n\u0131z. AWS Systems Manager Session Manager kullan\u0131yorsan\u0131z, EC2 instance'lar\u0131n\u0131z\u0131n genel IP'ye ihtiyac\u0131 yoktur.<\/p>\n
      Bastion host yerine VPN kullanabilir miyim?<\/h4>\n
      Evet, VPN (Virtual Private Network) de \u00f6zel kaynaklara g\u00fcvenli eri\u015fim sa\u011flaman\u0131n bir yoludur. AWS Client VPN veya kendi y\u00f6netti\u011finiz bir VPN \u00e7\u00f6z\u00fcm\u00fc kullanabilirsiniz. VPN, t\u00fcm a\u011f trafi\u011fini \u015fifreler ve kimlik do\u011frulamas\u0131 yapar. Bastion host, daha \u00e7ok SSH\/RDP tabanl\u0131 eri\u015fim i\u00e7in tek bir atlama noktas\u0131 sa\u011flarken, VPN t\u00fcm a\u011f seviyesinde eri\u015fim sa\u011flar. Se\u00e7im, ihtiya\u00e7lar\u0131n\u0131za ve y\u00f6netim tercihinize ba\u011fl\u0131d\u0131r.<\/p>\n
      Bastion host'un maliyeti nedir?<\/h4>\n
      Bastion host'un maliyeti, kulland\u0131\u011f\u0131n\u0131z EC2 instance tipine, depolama alan\u0131na ve veri transferine ba\u011fl\u0131d\u0131r. Genellikle t2.micro veya t3.micro gibi k\u00fc\u00e7\u00fck bir instance tipi kullan\u0131ld\u0131\u011f\u0131 i\u00e7in maliyet olduk\u00e7a d\u00fc\u015f\u00fckt\u00fcr. Ek olarak, bir Elastic IP kullan\u0131yorsan\u0131z ve bu IP bir instance'a atanmam\u0131\u015fsa k\u00fc\u00e7\u00fck bir \u00fccret \u00f6deyebilirsiniz.<\/p>\n
      Bastion host'u ne s\u0131kl\u0131kla g\u00fcncellemeliyim?<\/h4>\n
      Bastion host'unuzun i\u015fletim sistemi ve kurulu t\u00fcm yaz\u0131l\u0131mlar\u0131 d\u00fczenli olarak g\u00fcncel tutulmal\u0131d\u0131r. G\u00fcvenlik yamalar\u0131 \u00e7\u0131kt\u0131k\u00e7a veya ayl\u0131k\/\u00fc\u00e7 ayl\u0131k periyotlarla g\u00fcncellemeleri kontrol etmeli ve uygulamal\u0131s\u0131n\u0131z. Otomatik yama y\u00f6netim ara\u00e7lar\u0131 (AWS Systems Manager Patch Manager gibi) bu s\u00fcreci kolayla\u015ft\u0131rabilir.<\/p>\n
      Bastion host'u nas\u0131l yedeklerim?<\/h4>\n
      Bastion host'unuzu yedeklemek i\u00e7in, EC2 instance'\u0131n\u0131n bir Amazon Machine Image (AMI) yede\u011fini alabilirsiniz. Bu AMI, instance'\u0131n bir anl\u0131k g\u00f6r\u00fcnt\u00fcs\u00fcd\u00fcr ve bir ar\u0131za durumunda h\u0131zla yeni bir instance ba\u015flatmak i\u00e7in kullan\u0131labilir. Ayr\u0131ca, birden fazla Availability Zone'da yedekli bastion host'lar da\u011f\u0131tarak y\u00fcksek eri\u015filebilirlik sa\u011flayabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"\u00d6rnek G\u00fcvenlik Grubu Kurallar\u0131:","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1406],"tags":[],"class_list":{"0":"post-37211","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-aws","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nAWS'te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS'te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber\" \/>\n<meta property=\"og:description\" content=\"\u00d6rnek G\u00fcvenlik Grubu Kurallar\u0131:\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-28T20:30:37+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"AWS’te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber\",\"datePublished\":\"2025-12-28T20:30:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\"},\"wordCount\":2709,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"AWS\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\",\"name\":\"AWS'te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-28T20:30:37+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS’te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"AWS'te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/","og_locale":"tr_TR","og_type":"article","og_title":"AWS'te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber","og_description":"\u00d6rnek G\u00fcvenlik Grubu Kurallar\u0131:","og_url":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-28T20:30:37+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"14 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"AWS’te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber","datePublished":"2025-12-28T20:30:37+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/"},"wordCount":2709,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["AWS"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/","url":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/","name":"AWS'te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-28T20:30:37+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/awste-guvenli-bir-bastion-host-mimarisi-olusturma-adim-adim-kapsamli-bir-rehber\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AWS’te G\u00fcvenli Bir Bastion Host Mimarisi Olu\u015fturma: Ad\u0131m Ad\u0131m Kapsaml\u0131 Bir Rehber"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37211"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37211\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}