{"id":3912,"date":"2024-11-14T18:15:09","date_gmt":"2024-11-14T15:15:09","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/aws-cdk-l2-construct-amazon-cloudfront-icin-basitlestirilmis-guvenlik-origin-access-control-oac\/"},"modified":"2024-11-14T18:15:09","modified_gmt":"2024-11-14T15:15:09","slug":"aws-cdk-l2-construct-amazon-cloudfront-icin-basitlestirilmis-guvenlik-origin-access-control-oac","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/aws-cdk-l2-construct-amazon-cloudfront-icin-basitlestirilmis-guvenlik-origin-access-control-oac\/","title":{"rendered":"AWS CDK L2 Construct: Amazon CloudFront \u0130\u00e7in Basitle\u015ftirilmi\u015f G\u00fcvenlik – Origin Access Control (OAC)"},"content":{"rendered":"

AWS CDK L2 Construct: Amazon CloudFront \u0130\u00e7in Basitle\u015ftirilmi\u015f G\u00fcvenlik – Origin Access Control (OAC)<\/p>\n

Bu makalede, AWS CDK’n\u0131n g\u00fcc\u00fcn\u00fc kullanarak Amazon CloudFront i\u00e7in g\u00fcvenli\u011fi basitle\u015ftiren ve geli\u015fmi\u015f koruma sa\u011flayan yeni bir L2 yap\u0131s\u0131 olan Origin Access Control (OAC) hakk\u0131nda bilgi verece\u011fim. OAC ile CloudFront da\u011f\u0131t\u0131m\u0131n\u0131za eri\u015fimi yetkilendirecek ve yaln\u0131zca yetkili kaynaklar\u0131n i\u00e7eriklerinize eri\u015fmesini sa\u011flayabileceksiniz.<\/p>\n

Amazon CloudFront ve Origin Access Control (OAC)<\/h2>\n

Amazon CloudFront, i\u00e7erik da\u011f\u0131t\u0131m a\u011f\u0131 (CDN) hizmetidir. Web sitenizi veya uygulaman\u0131z\u0131 d\u00fcnya genelinde kullan\u0131c\u0131lara h\u0131zl\u0131 ve g\u00fcvenilir bir \u015fekilde sunmak i\u00e7in kullan\u0131l\u0131r. CloudFront, kullan\u0131c\u0131lara i\u00e7erik sunmak i\u00e7in da\u011f\u0131t\u0131m noktalar\u0131 ad\u0131 verilen sunuculara sahiptir. Origin Access Control (OAC), CloudFront da\u011f\u0131t\u0131mlar\u0131n\u0131z\u0131n yaln\u0131zca yetkili kaynaklardan i\u00e7erik \u00e7ekmesini sa\u011flamak i\u00e7in kullan\u0131labilen bir g\u00fcvenlik \u00f6zelli\u011fidir. <\/p>\n

OAC’yi kullanarak, CloudFront’un hangi kaynaklara eri\u015febilece\u011fini belirlemek ve hangi kaynaklara eri\u015femeyece\u011fini belirlemek i\u00e7in kurallar olu\u015fturabilirsiniz. Bu kurallar, orijin URL’si, orijin ba\u015fl\u0131klar\u0131 veya di\u011fer parametreler gibi fakt\u00f6rlere dayal\u0131 olabilir.<\/p>\n

AWS CDK ve OAC L2 Construct<\/h2>\n

AWS CDK (Cloud Development Kit), altyap\u0131n\u0131z\u0131 kod kullanarak tan\u0131mlaman\u0131za olanak tan\u0131yan bir frameworkt\u00fcr. AWS CDK, daha h\u0131zl\u0131 ve daha tutarl\u0131 bir \u015fekilde altyap\u0131 olu\u015fturman\u0131z\u0131 ve y\u00f6netmenizi sa\u011flar.<\/p>\n

Yeni CDK L2 construct’umuz, OAC kurallar\u0131n\u0131 tan\u0131mlamay\u0131 kolayla\u015ft\u0131r\u0131r. Bu construct, CloudFront da\u011f\u0131t\u0131mlar\u0131n\u0131z i\u00e7in OAC yap\u0131land\u0131rmas\u0131 olu\u015fturmak i\u00e7in basit bir API sa\u011flar. Kodunuzda sadece birka\u00e7 sat\u0131r ekleyerek, OAC’yi da\u011f\u0131t\u0131mlar\u0131n\u0131za uygulayabilir ve g\u00fcvenli\u011fi geli\u015ftirebilirsiniz.<\/p>\n

OAC Construct Kullanarak G\u00fcvenli\u011fi Art\u0131rma<\/h2>\n

\u0130\u015fte OAC construct’umuzun nas\u0131l kullan\u0131labilece\u011fine dair bir \u00f6rnek:<\/p>\n

“`typescript
\nimport * as cdk from ‘aws-cdk-lib’;
\nimport * as cloudfront from ‘aws-cdk-lib\/aws-cloudfront’;
\nimport * as origins from ‘aws-cdk-lib\/aws-cloudfront-origins’;
\nimport * as s3 from ‘aws-cdk-lib\/aws-s3’;
\nimport { Oac } from ‘my-cdk-construct’;<\/p>\n

const stack = new cdk.Stack(app, ‘MyStack’);<\/p>\n

const myBucket = new s3.Bucket(stack, ‘MyBucket’);<\/p>\n

const distribution = new cloudfront.Distribution(stack, ‘MyDistribution’, {
\n defaultBehavior: {
\n origin: new origins.S3Origin(myBucket),
\n },
\n});<\/p>\n

\/\/ OAC construct’unu kullanarak bir OAC kural\u0131 olu\u015fturun
\nconst oac = new Oac(stack, ‘MyOac’, {
\n distribution: distribution,
\n allowedOrigins: [‘my-allowed-origin.com’], \/\/ \u0130zin verilen kaynaklar
\n});
\n“`<\/p>\n

Bu \u00f6rnekte, `Oac` construct’unu kullanarak yaln\u0131zca `my-allowed-origin.com` kayna\u011f\u0131ndan i\u00e7erik eri\u015fimine izin veren bir OAC kural\u0131 olu\u015fturuyoruz. Bu, CloudFront’un di\u011fer kaynaklardan i\u00e7erik \u00e7ekmesini engeller ve da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n g\u00fcvenli\u011fini art\u0131r\u0131r.<\/p>\n

OAC Construct’un Avantajlar\u0131<\/h2>\n

OAC construct’umuz, CloudFront da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rman\u0131n birka\u00e7 avantaj\u0131n\u0131 sunar:<\/p>\n