{"id":41763,"date":"2026-05-14T09:04:38","date_gmt":"2026-05-14T06:04:38","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/"},"modified":"2026-05-14T09:04:38","modified_gmt":"2026-05-14T06:04:38","slug":"s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/","title":{"rendered":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?"},"content":{"rendered":"<h2>S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?<\/h2>\n<p>Amazon S3 (Simple Storage Service) \u00fczerindeki verilerinizin fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131na u\u011framas\u0131, her kurum i\u00e7in k\u00e2bus senaryolar\u0131ndan biridir. Bu t\u00fcr bir olayla kar\u015f\u0131la\u015ft\u0131\u011f\u0131n\u0131zda pani\u011fe kap\u0131lmak yerine, ilk kritik dakikalarda ataca\u011f\u0131n\u0131z do\u011fru ad\u0131mlar, veri kayb\u0131n\u0131 minimize etme ve i\u015f s\u00fcreklili\u011fini sa\u011flama a\u00e7\u0131s\u0131ndan hayati \u00f6neme sahiptir. Bu makale, S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131 an\u0131nda izlemeniz gereken acil m\u00fcdahale stratejilerini ad\u0131m ad\u0131m a\u00e7\u0131klayacakt\u0131r.<\/p>\n<h2>S3 Fidye Yaz\u0131l\u0131m\u0131 Nedir ve Neden Hedef Olur?<\/h2>\n<p>S3 fidye yaz\u0131l\u0131m\u0131, genellikle Amazon S3 depolama kovalar\u0131ndaki (bucket) verileri \u015fifreleyerek veya silerek eri\u015filemez hale getiren ve kar\u015f\u0131l\u0131\u011f\u0131nda fidye talep eden k\u00f6t\u00fc ama\u00e7l\u0131 bir sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. Bu t\u00fcr sald\u0131r\u0131lar, genellikle yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f IAM (Kimlik ve Eri\u015fim Y\u00f6netimi) politikalar\u0131, s\u0131zd\u0131r\u0131lm\u0131\u015f AWS kimlik bilgileri, zay\u0131f g\u00fcvenlik uygulamalar\u0131 veya \u00fc\u00e7\u00fcnc\u00fc taraf entegrasyonlar\u0131ndaki g\u00fcvenlik a\u00e7\u0131klar\u0131 \u00fczerinden ger\u00e7ekle\u015fir. S3, d\u00fcnya genelinde milyonlarca i\u015fletmenin kritik verilerini bar\u0131nd\u0131rd\u0131\u011f\u0131 i\u00e7in siber su\u00e7lular i\u00e7in cazip bir hedeftir.<\/p>\n<h3>S3 Kovalar\u0131 Neden Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131lar\u0131na Maruz Kal\u0131r?<\/h3>\n<p>S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131n\u0131n temelinde yatan birka\u00e7 yayg\u0131n zafiyet bulunmaktad\u0131r. Bunlar\u0131 anlamak, sald\u0131r\u0131 an\u0131nda neyin yanl\u0131\u015f gitti\u011fini h\u0131zl\u0131ca tespit etmenize yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n<ul>\n<li><strong>Zay\u0131f IAM Politikalar\u0131 ve S\u0131zd\u0131r\u0131lm\u0131\u015f Kimlik Bilgileri:<\/strong> En yayg\u0131n sald\u0131r\u0131 vekt\u00f6rlerinden biridir. Bir kullan\u0131c\u0131n\u0131n veya uygulaman\u0131n AWS kimlik bilgilerinin (eri\u015fim anahtarlar\u0131 ve gizli anahtarlar) ele ge\u00e7irilmesi durumunda, sald\u0131rgan bu kimlik bilgilerini kullanarak S3 kovalar\u0131n\u0131za tam eri\u015fim sa\u011flayabilir. \u00d6zellikle <code>s3:*<\/code> veya <code>s3:PutObject<\/code>, <code>s3:DeleteObject<\/code> gibi geni\u015f izinler, fidye yaz\u0131l\u0131m\u0131n\u0131n veri \u015fifrelemesi veya silmesi i\u00e7in k\u00f6t\u00fcye kullan\u0131labilir. Multi-Factor Authentication (MFA) kullan\u0131lmamas\u0131 veya zay\u0131f parola politikalar\u0131 bu riski art\u0131r\u0131r.<\/li>\n<li><strong>A\u00e7\u0131kta B\u0131rak\u0131lan S3 Kovalar\u0131:<\/strong> Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f kova politikalar\u0131 veya ACL&#8217;ler (Eri\u015fim Kontrol Listeleri) nedeniyle S3 kovalar\u0131n\u0131n internete a\u00e7\u0131k hale gelmesi, sald\u0131rganlar\u0131n kolayca eri\u015fim sa\u011flamas\u0131na olanak tan\u0131r. AWS&#8217;nin &#8220;Block Public Access&#8221; (Herkese A\u00e7\u0131k Eri\u015fimi Engelle) ayar\u0131n\u0131n varsay\u0131lan olarak etkinle\u015ftirilmesi bu riski b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azaltsa da, manuel m\u00fcdahalelerle bu ayarlar\u0131n de\u011fi\u015ftirilmesi m\u00fcmk\u00fcn olabilir.<\/li>\n<li><strong>Vulnerable Uygulamalar ve \u00dc\u00e7\u00fcnc\u00fc Taraf Entegrasyonlar\u0131:<\/strong> S3 kovalar\u0131yla etkile\u015fimde bulunan web uygulamalar\u0131 veya \u00fc\u00e7\u00fcnc\u00fc taraf hizmetlerindeki g\u00fcvenlik a\u00e7\u0131klar\u0131 da bir giri\u015f noktas\u0131 olabilir. \u00d6rne\u011fin, bir web uygulamas\u0131ndaki dosya y\u00fckleme zafiyeti, sald\u0131rgan\u0131n S3&#8217;e k\u00f6t\u00fc ama\u00e7l\u0131 kod y\u00fcklemesine veya mevcut verileri manip\u00fcle etmesine olanak tan\u0131yabilir.<\/li>\n<li><strong>Geli\u015fmi\u015f Kal\u0131c\u0131l\u0131k Mekanizmalar\u0131:<\/strong> Baz\u0131 fidye yaz\u0131l\u0131mlar\u0131, sadece veriyi \u015fifrelemekle kalmaz, ayn\u0131 zamanda eri\u015fimi engellemek i\u00e7in S3 kova politikalar\u0131n\u0131 veya IAM kullan\u0131c\u0131lar\u0131n\u0131 da de\u011fi\u015ftirmeye \u00e7al\u0131\u015fabilir. Bu, kurtarma s\u00fcrecini daha karma\u015f\u0131k hale getirebilir.<\/li>\n<\/ul>\n<p>Bu zafiyetlerin fark\u0131nda olmak, sald\u0131r\u0131 an\u0131nda do\u011fru te\u015fhisi koymak ve h\u0131zl\u0131ca m\u00fcdahale etmek i\u00e7in kritik \u00f6neme sahiptir. Unutmay\u0131n, fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131 genellikle beklenmedik anlarda ger\u00e7ekle\u015fir ve ilk tepkilerinizin h\u0131z\u0131, zarar\u0131n boyutunu do\u011frudan etkiler.<\/p>\n<h2>\u0130lk Kritik Dakikalar: Hasar\u0131 Durdurma ve Kapsam\u0131 Belirleme<\/h2>\n<p>Bir S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131 tespit etti\u011finizde, panik yapmak yerine so\u011fukkanl\u0131l\u0131kla hareket etmeli ve \u00f6ncelikli olarak hasar\u0131 durdurmaya odaklanmal\u0131s\u0131n\u0131z. \u0130lk dakikalarda ataca\u011f\u0131n\u0131z ad\u0131mlar, sald\u0131r\u0131n\u0131n yay\u0131lmas\u0131n\u0131 \u00f6nleyecek ve potansiyel veri kayb\u0131n\u0131 s\u0131n\u0131rlayacakt\u0131r.<\/p>\n<h3>1. An\u0131nda Eri\u015fimi Engelleme ve \u0130zolasyon: Sald\u0131rgan\u0131n Elini Kolunu Ba\u011flay\u0131n<\/h3>\n<p>Sald\u0131r\u0131y\u0131 durdurman\u0131n ilk ve en \u00f6nemli ad\u0131m\u0131, sald\u0131rgan\u0131n AWS ortam\u0131n\u0131zla olan t\u00fcm ba\u011flant\u0131s\u0131n\u0131 kesmektir. Bu, fidye yaz\u0131l\u0131m\u0131n\u0131n daha fazla veri \u015fifrelemesini veya silmesini engeller.<\/p>\n<ul>\n<li><strong>\u015e\u00fcpheli IAM Kimlik Bilgilerini \u0130ptal Edin:<\/strong> E\u011fer sald\u0131r\u0131n\u0131n kayna\u011f\u0131 olarak belirli bir IAM kullan\u0131c\u0131s\u0131, rol\u00fc veya eri\u015fim anahtar\u0131 (access key) tespit ettiyseniz, bu kimlik bilgilerini derhal devre d\u0131\u015f\u0131 b\u0131rak\u0131n veya silin.\n<div class=\"code-container\">\n<pre><code>aws iam delete-access-key --access-key-id AKIAIOSFODNN7EXAMPLE --user-name Alice\naws iam detach-user-policy --user-name Alice --policy-arn arn:aws:iam::123456789012:policy\/S3FullAccessPolicy<\/pre>\n<p><\/code>\n        <\/div>\n<p>        Bu komutlar, belirtilen eri\u015fim anahtar\u0131n\u0131 siler ve kullan\u0131c\u0131dan S3'e tam eri\u015fim sa\u011flayan politikay\u0131 ay\u0131r\u0131r. E\u011fer sald\u0131r\u0131 bir IAM rol\u00fc \u00fczerinden ger\u00e7ekle\u015fiyorsa, rol\u00fcn g\u00fcvendi\u011fi politikalar\u0131 veya rol\u00fcn kendisini ge\u00e7ici olarak devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li><strong>Sald\u0131rgan\u0131n IP Adresini Engelleyin:<\/strong> E\u011fer AWS CloudTrail g\u00fcnl\u00fcklerinizde veya S3 eri\u015fim g\u00fcnl\u00fcklerinizde sald\u0131rgan\u0131n IP adresini tespit ettiyseniz, bu IP adresini AWS WAF (Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131) veya g\u00fcvenlik gruplar\u0131 (security groups) arac\u0131l\u0131\u011f\u0131yla engelleyin.\n<div class=\"code-container\">\n<pre><code>aws ec2 authorize-security-group-ingress --group-id sg-xxxxxxxxxxxxxxxxx --protocol all --port all --cidr 192.0.2.0\/32<\/pre>\n<p><\/code>\n        <\/div>\n<p>        Bu komut, belirli bir IP adresinin g\u00fcvenlik grubuna eri\u015fimini engellemez, aksine izin verir. Engellemek i\u00e7in mevcut bir kural\u0131 silmeniz veya \"deny\" kural\u0131 eklemeniz gerekir. G\u00fcvenlik gruplar\u0131 genellikle \"izin verilenler\" listesi (whitelist) olarak \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in, sald\u0131rgan\u0131n eri\u015fimini kesmek i\u00e7in mevcut izinleri daraltmak veya AWS WAF gibi daha geli\u015fmi\u015f bir ara\u00e7 kullanmak daha etkili olacakt\u0131r.<\/li>\n<li><strong>\u0130lgili Uygulama veya Hizmetleri Durdurun:<\/strong> E\u011fer sald\u0131r\u0131, S3 ile entegre bir uygulama veya hizmet \u00fczerinden yay\u0131ld\u0131ysa, bu uygulaman\u0131n veya hizmetin S3 eri\u015fimini ge\u00e7ici olarak durdurun. Bu, uygulama sunucular\u0131n\u0131 kapatmak veya S3'e eri\u015fen IAM rollerini ge\u00e7ici olarak devre d\u0131\u015f\u0131 b\u0131rakmak anlam\u0131na gelebilir.<\/li>\n<li><strong>S3 Kova Politikalar\u0131n\u0131 G\u00f6zden Ge\u00e7irin ve S\u0131k\u0131la\u015ft\u0131r\u0131n:<\/strong> Sald\u0131rgan\u0131n kova politikalar\u0131n\u0131 de\u011fi\u015ftirmi\u015f olabilece\u011fi ihtimaline kar\u015f\u0131, etkilenen kovalar\u0131n politikalar\u0131n\u0131 kontrol edin ve gereksiz izinleri kald\u0131r\u0131n. \u00d6zellikle herkese a\u00e7\u0131k eri\u015fimi engelleyen \"Block Public Access\" ayarlar\u0131n\u0131n aktif oldu\u011fundan emin olun.<\/li>\n<\/ul>\n<h3>2. Hasar Kapsam\u0131n\u0131 Belirleme: Ne Kadar K\u00f6t\u00fc Durumday\u0131z?<\/h3>\n<p>Eri\u015fimi engelledikten sonra, sald\u0131r\u0131n\u0131n boyutunu ve etkilenen verileri anlamak i\u00e7in kapsaml\u0131 bir de\u011ferlendirme yapmal\u0131s\u0131n\u0131z.<\/p>\n<ul>\n<li><strong>CloudTrail ve S3 Eri\u015fim G\u00fcnl\u00fcklerini \u0130nceleyin:<\/strong> AWS CloudTrail, AWS hesab\u0131n\u0131zdaki t\u00fcm API \u00e7a\u011fr\u0131lar\u0131n\u0131 kaydeder. S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131nda, CloudTrail g\u00fcnl\u00fckleri size sald\u0131rgan\u0131n hangi eylemleri (<code>PutObject<\/code>, <code>DeleteObject<\/code>, <code>PutBucketPolicy<\/code> vb.) ger\u00e7ekle\u015ftirdi\u011fini, hangi IP adresinden geldi\u011fini ve hangi kimlik bilgilerini kulland\u0131\u011f\u0131n\u0131 g\u00f6sterecektir. S3 eri\u015fim g\u00fcnl\u00fckleri ise hangi nesnelere ne zaman eri\u015fildi\u011fini veya de\u011fi\u015ftirildi\u011fini anlaman\u0131za yard\u0131mc\u0131 olur.\n<div class=\"code-container\">\n<pre><code>aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=PutObject --start-time 2023-10-26T00:00:00Z --end-time 2023-10-26T23:59:59Z<\/pre>\n<p><\/code>\n        <\/div>\n<p>        Bu komut, belirli bir zaman aral\u0131\u011f\u0131nda ger\u00e7ekle\u015fen t\u00fcm <code>PutObject<\/code> olaylar\u0131n\u0131 listeler. Bu sayede \u015fifrelenen veya de\u011fi\u015ftirilen nesneleri tespit edebilirsiniz.<\/li>\n<li><strong>Etkilenen Kovalar\u0131 ve Nesneleri Tespit Edin:<\/strong> Hangi S3 kovalar\u0131n\u0131n ve bu kovalar i\u00e7indeki hangi nesnelerin etkilendi\u011fini belirleyin. \u015eifrelenmi\u015f veya silinmi\u015f nesneleri, dosya uzant\u0131lar\u0131ndaki de\u011fi\u015fiklikler (\u00f6rn: <code>.encrypted<\/code>, <code>.ransom<\/code>) veya boyut farkl\u0131l\u0131klar\u0131 arac\u0131l\u0131\u011f\u0131yla tespit edebilirsiniz. AWS S3 envanter raporlar\u0131 veya S3 Batch Operations, bu tespiti h\u0131zland\u0131rman\u0131za yard\u0131mc\u0131 olabilir.<\/li>\n<li><strong>Sald\u0131r\u0131n\u0131n Ba\u015flang\u0131\u00e7 Zaman\u0131n\u0131 Belirleyin:<\/strong> CloudTrail ve S3 g\u00fcnl\u00fcklerini kullanarak sald\u0131r\u0131n\u0131n tam olarak ne zaman ba\u015flad\u0131\u011f\u0131n\u0131 ve ne kadar s\u00fcrd\u00fc\u011f\u00fcn\u00fc anlamak, kurtarma s\u00fcrecinde do\u011fru zaman noktas\u0131n\u0131 se\u00e7mek i\u00e7in kritik \u00f6neme sahiptir. Bu, \u00f6zellikle S3 versiyonlama kullan\u0131yorsan\u0131z, hangi versiyona geri d\u00f6nece\u011finizi belirlemenize yard\u0131mc\u0131 olur.<\/li>\n<\/ul>\n<p>Bu ad\u0131mlar, sald\u0131r\u0131n\u0131n nedenini, kapsam\u0131n\u0131 ve etkilerini h\u0131zl\u0131ca anlaman\u0131z\u0131 sa\u011flayarak, bir sonraki a\u015fama olan kurtarma s\u00fcrecine sa\u011flam bir temel haz\u0131rlar. Unutmay\u0131n, her saniye \u00f6nemlidir.<\/p>\n<h2>Veri Kurtarma ve \u0130\u015f S\u00fcreklili\u011fi: S3 Versiyonlama ve Yedeklemelerin G\u00fcc\u00fc<\/h2>\n<p>Hasar\u0131 durdurup sald\u0131r\u0131n\u0131n kapsam\u0131n\u0131 belirledikten sonra, \u00f6ncelikli hedefiniz verilerinizi kurtarmak ve i\u015f s\u00fcreklili\u011fini sa\u011flamakt\u0131r. Bu a\u015famada S3'\u00fcn yerle\u015fik \u00f6zellikleri ve yedekleme stratejileriniz devreye girer.<\/p>\n<h3>1. S3 Versiyonlama (Versioning) ile Geri D\u00f6n\u00fc\u015f: Kurtar\u0131c\u0131n\u0131z\u0131n G\u00fcc\u00fc<\/h3>\n<p>S3 versiyonlama, fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131ndan kurtulmak i\u00e7in en g\u00fc\u00e7l\u00fc ara\u00e7lardan biridir. E\u011fer S3 kovalar\u0131n\u0131zda versiyonlama etkinse, fidye yaz\u0131l\u0131m\u0131n\u0131n \u015fifreledi\u011fi veya sildi\u011fi nesnelerin \u00f6nceki, sa\u011flam versiyonlar\u0131na kolayca geri d\u00f6nebilirsiniz.<\/p>\n<ul>\n<li><strong>Versiyonlaman\u0131n \u00c7al\u0131\u015fma Prensibi:<\/strong> S3 versiyonlama etkinle\u015ftirildi\u011finde, bir nesnenin her yeni s\u00fcr\u00fcm\u00fc (g\u00fcncelleme veya silme i\u015flemi dahil) ayr\u0131 bir versiyon olarak saklan\u0131r. Bu, fidye yaz\u0131l\u0131m\u0131 bir nesneyi \u015fifreledi\u011finde veya sildi\u011finde, asl\u0131nda nesnenin yeni bir \u015fifreli\/bozuk versiyonunu olu\u015fturdu\u011fu veya bir \"silme i\u015faret\u00e7isi\" (delete marker) ekledi\u011fi anlam\u0131na gelir. Orijinal, sa\u011flam versiyonlar hala mevcuttur.<\/li>\n<li><strong>\u015eifrelenmi\u015f Nesnelerin Kurtar\u0131lmas\u0131:<\/strong>\n<ol>\n<li>Etkilenen nesnelerin listesini \u00e7\u0131kar\u0131n.<\/li>\n<li>Her bir nesne i\u00e7in, AWS Y\u00f6netim Konsolu, AWS CLI veya SDK'lar arac\u0131l\u0131\u011f\u0131yla nesnenin versiyon ge\u00e7mi\u015fini kontrol edin.<\/li>\n<li>Sald\u0131r\u0131dan \u00f6nceki en son sa\u011flam versiyonu belirleyin.<\/li>\n<li>Bu sa\u011flam versiyonu mevcut versiyon olarak ayarlay\u0131n veya ayr\u0131 bir yere kopyalay\u0131n.\n<div class=\"code-container\">\n<pre><code># \u00d6rnek: Belirli bir nesnenin sa\u011flam versiyonunu kurtarma\n# \u0130lk olarak, nesnenin versiyonlar\u0131n\u0131 listeleyin\naws s3api list-object-versions --bucket your-bucket-name --prefix path\/to\/your\/file.txt\n\n# Sald\u0131r\u0131 \u00f6ncesi sa\u011flam versiyonun ID'sini belirleyin (\u00f6rne\u011fin, 'abcdef1234567890')\n# Ard\u0131ndan, bu versiyonu mevcut versiyonun \u00fczerine kopyalayarak geri y\u00fckleyin\naws s3api copy-object --bucket your-bucket-name --key path\/to\/your\/file.txt --copy-source \/your-bucket-name\/path\/to\/your\/file.txt?versionId=abcdef1234567890 --metadata-directive REPLACE<\/pre>\n<p><\/code>\n                <\/div>\n<p>                Bu i\u015flem, sa\u011flam versiyonu mevcut aktif versiyon haline getirir.<\/li>\n<\/ol>\n<\/li>\n<li><strong>Silinen Nesnelerin Kurtar\u0131lmas\u0131:<\/strong> Fidye yaz\u0131l\u0131m\u0131 bir nesneyi sildi\u011finde, S3 asl\u0131nda bir \"silme i\u015faret\u00e7isi\" (delete marker) olu\u015fturur. Bu i\u015faret\u00e7iyi silerek, nesnenin \u00f6nceki versiyonlar\u0131n\u0131n tekrar g\u00f6r\u00fcn\u00fcr olmas\u0131n\u0131 sa\u011flayabilirsiniz.\n<div class=\"code-container\">\n<pre><code># Silme i\u015faret\u00e7isini silerek nesneyi geri y\u00fckleme\n# \u00d6nce silme i\u015faret\u00e7isinin versiyon ID'sini bulun\naws s3api list-object-versions --bucket your-bucket-name --prefix path\/to\/your\/file.txt\n\n# Silme i\u015faret\u00e7isinin versiyon ID'sini (\u00f6rne\u011fin, 'xyz1234567890abc') kullanarak silin\naws s3api delete-object --bucket your-bucket-name --key path\/to\/your\/file.txt --version-id xyz1234567890abc<\/pre>\n<p><\/code>\n        <\/div>\n<p>        Bu i\u015flem, silme i\u015faret\u00e7isini kald\u0131r\u0131r ve nesnenin \u00f6nceki versiyonlar\u0131n\u0131n tekrar eri\u015filebilir olmas\u0131n\u0131 sa\u011flar.<\/li>\n<\/ul>\n<h3>2. Yedekleme Stratejileri: Versiyonlama Yetmezse Ne Yapmal\u0131?<\/h3>\n<p>S3 versiyonlama etkin de\u011filse veya sald\u0131rgan versiyonlar\u0131 da manip\u00fcle etmeyi ba\u015fard\u0131ysa (ki bu daha geli\u015fmi\u015f bir senaryodur), ba\u011f\u0131ms\u0131z yedeklemeleriniz kurtar\u0131c\u0131n\u0131z olacakt\u0131r.<\/p>\n<ul>\n<li><strong>\u00c7apraz B\u00f6lge (Cross-Region) veya \u00c7apraz Hesap (Cross-Account) \u00c7o\u011faltma:<\/strong> E\u011fer kritik S3 kovalar\u0131n\u0131z\u0131 farkl\u0131 bir AWS b\u00f6lgesine veya tamamen farkl\u0131 bir AWS hesab\u0131na \u00e7o\u011falt\u0131yorsan\u0131z, bu \u00e7o\u011falt\u0131lm\u0131\u015f veriler sa\u011flam bir kurtarma noktas\u0131 sunar. Fidye yaz\u0131l\u0131m\u0131 genellikle tek bir hesap veya b\u00f6lgeyi hedef al\u0131r.\n<ol>\n<li>\u00c7o\u011falt\u0131lm\u0131\u015f kovan\u0131zdan (kaynak kovan\u0131zdan etkilenmemi\u015f olan) verileri indirin.<\/li>\n<li>Etkilenen kovan\u0131zdaki t\u00fcm \u015fifreli\/bozuk verileri temizleyin.<\/li>\n<li>Sa\u011flam verileri etkilenen kovan\u0131za geri y\u00fckleyin.<\/li>\n<\/ol>\n<\/li>\n<li><strong>\u00dc\u00e7\u00fcnc\u00fc Taraf Yedekleme \u00c7\u00f6z\u00fcmleri:<\/strong> AWS d\u0131\u015f\u0131ndaki bir yedekleme hizmeti kullan\u0131yorsan\u0131z (\u00f6rn. Veeam, Commvault, Rubrik gibi bulut yedekleme \u00e7\u00f6z\u00fcmleri), bu yedeklerden geri y\u00fckleme yapabilirsiniz. Bu \u00e7\u00f6z\u00fcmler genellikle S3'ten ba\u011f\u0131ms\u0131z olarak kendi versiyonlama ve kurtarma yeteneklerine sahiptir.<\/li>\n<li><strong>Ar\u015fivleme ve Ya\u015fam D\u00f6ng\u00fcs\u00fc Politikalar\u0131:<\/strong> Nadiren eri\u015filen verileriniz i\u00e7in S3 Glacier veya Glacier Deep Archive gibi daha uygun maliyetli depolama s\u0131n\u0131flar\u0131na ar\u015fivleme yap\u0131yorsan\u0131z, bu ar\u015fivlerden verileri geri y\u00fckleyebilirsiniz. Ancak, bu i\u015flem daha uzun s\u00fcrebilir ve an\u0131nda i\u015f s\u00fcreklili\u011fi i\u00e7in uygun olmayabilir.<\/li>\n<\/ul>\n<h3>3. Veri B\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc Do\u011frulama<\/h3>\n<p>Verileri kurtard\u0131ktan sonra, kurtar\u0131lan verilerin b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve do\u011frulu\u011funu mutlaka kontrol edin. \u00d6rnek dosyalar\u0131 a\u00e7\u0131n, uygulamalar\u0131n\u0131z\u0131 test edin ve verilerin beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun. Bu, gelecekteki olas\u0131 sorunlar\u0131 \u00f6nlemek i\u00e7in kritik bir ad\u0131md\u0131r.<\/p>\n<p>Bu ad\u0131mlar, fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131n\u0131n ard\u0131ndan verilerinizi geri getirmenize ve operasyonlar\u0131n\u0131z\u0131 yeniden ba\u015flatman\u0131za yard\u0131mc\u0131 olacakt\u0131r. Ancak unutmay\u0131n, en iyi savunma her zaman g\u00fc\u00e7l\u00fc bir \u00f6nleyici tedbirdir.<\/p>\n<h2>\u00d6nleyici Tedbirler: Gelecekteki Sald\u0131r\u0131lar\u0131 Engelleme<\/h2>\n<p>S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131yla ba\u015fa \u00e7\u0131kmak zorlu bir s\u00fcre\u00e7tir, ancak bu t\u00fcr olaylar\u0131n tekrarlanmas\u0131n\u0131 \u00f6nlemek i\u00e7in proaktif ad\u0131mlar atmak hayati \u00f6nem ta\u015f\u0131r. G\u00fc\u00e7l\u00fc \u00f6nleyici tedbirler, siber g\u00fcvenlik stratejinizin temelini olu\u015fturmal\u0131d\u0131r.<\/p>\n<h3>1. IAM En \u0130yi Uygulamalar\u0131: En Az Yetki Prensibi ve MFA<\/h3>\n<p>IAM, AWS ortam\u0131n\u0131zdaki eri\u015fim kontrol\u00fcn\u00fcn temelidir ve do\u011fru yap\u0131land\u0131r\u0131lmad\u0131\u011f\u0131nda en b\u00fcy\u00fck zafiyet kayna\u011f\u0131 olabilir.<\/p>\n<ul>\n<li><strong>En Az Yetki Prensibi (Principle of Least Privilege):<\/strong> Kullan\u0131c\u0131lara ve rollere yaln\u0131zca g\u00f6revlerini yerine getirmek i\u00e7in kesinlikle ihtiya\u00e7 duyduklar\u0131 minimum izinleri verin. \u00d6rne\u011fin, bir uygulaman\u0131n sadece belirli bir S3 kovas\u0131na dosya y\u00fcklemesi gerekiyorsa, ona t\u00fcm S3 kovalar\u0131na tam eri\u015fim veren <code>s3:*<\/code> izni yerine sadece <code>s3:PutObject<\/code> iznini belirli bir kaynak \u00fczerinde (ARN) verin.\n<div class=\"code-container\">\n<pre><code>{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": \"s3:PutObject\",\n            \"Resource\": \"arn:aws:s3:::your-specific-bucket\/*\"\n        }\n    ]\n}<\/pre>\n<p><\/code>\n        <\/div>\n<p>        Bu \u00f6rnek politika, yaln\u0131zca belirtilen kovaya nesne y\u00fckleme izni verir.<\/li>\n<li><strong>\u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA):<\/strong> T\u00fcm AWS kullan\u0131c\u0131lar\u0131, \u00f6zellikle root kullan\u0131c\u0131 ve y\u00f6netici ayr\u0131cal\u0131klar\u0131na sahip kullan\u0131c\u0131lar i\u00e7in MFA'y\u0131 zorunlu k\u0131l\u0131n. Bu, kimlik bilgileri ele ge\u00e7irilse bile sald\u0131rgan\u0131n eri\u015fim sa\u011flamas\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde zorla\u015ft\u0131r\u0131r.<\/li>\n<li><strong>IAM Rolleri Kullan\u0131n, Eri\u015fim Anahtarlar\u0131 Yerine:<\/strong> Uygulamalar ve EC2 \u00f6rnekleri i\u00e7in eri\u015fim anahtarlar\u0131 yerine IAM rolleri kullan\u0131n. Rollerin ge\u00e7ici kimlik bilgileri vard\u0131r ve daha g\u00fcvenlidir. Eri\u015fim anahtarlar\u0131 kullanman\u0131z gerekiyorsa, bunlar\u0131 d\u00fczenli olarak d\u00f6nd\u00fcr\u00fcn ve g\u00fcvenli bir \u015fekilde saklay\u0131n.<\/li>\n<li><strong>IAM Access Analyzer:<\/strong> IAM Access Analyzer'\u0131 kullanarak d\u0131\u015far\u0131dan eri\u015filebilen kaynaklar\u0131 (S3 kovalar\u0131 dahil) tespit edin ve gereksiz eri\u015fimleri kald\u0131r\u0131n.<\/li>\n<\/ul>\n<h3>2. S3 G\u00fcvenlik \u00d6zellikleri: Kova Politikalar\u0131, \u015eifreleme ve Versiyonlama<\/h3>\n<p>S3'\u00fcn kendi i\u00e7inde sundu\u011fu g\u00fcvenlik \u00f6zelliklerini tam olarak kullanmak, fidye yaz\u0131l\u0131m\u0131na kar\u015f\u0131 en iyi savunmalardan biridir.<\/p>\n<ul>\n<li><strong>S3 Block Public Access (Herkese A\u00e7\u0131k Eri\u015fimi Engelle):<\/strong> Bu ayarlar\u0131 hesap d\u00fczeyinde ve kova d\u00fczeyinde etkinle\u015ftirin. Bu, yanl\u0131\u015fl\u0131kla kovalar\u0131n\u0131z\u0131n internete a\u00e7\u0131k hale gelmesini engeller ve fidye yaz\u0131l\u0131m\u0131n\u0131n \"a\u00e7\u0131k kova\" vekt\u00f6r\u00fcn\u00fc kullanmas\u0131n\u0131 \u00f6nler.<\/li>\n<li><strong>S3 Versiyonlama (Versioning):<\/strong> T\u00fcm kritik S3 kovalar\u0131n\u0131zda versiyonlamay\u0131 etkinle\u015ftirin. Bu, fidye yaz\u0131l\u0131m\u0131 verilerinizi \u015fifrelese veya silse bile, \u00f6nceki sa\u011flam versiyonlara geri d\u00f6nmenizi sa\u011flar. Versiyonlama, bir fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131ndan kurtulmak i\u00e7in temel bir \u00f6n ko\u015fuldur.<\/li>\n<li><strong>S3 Object Lock (Nesne Kilidi):<\/strong> Hassas veriler i\u00e7in S3 Object Lock'u kullanmay\u0131 d\u00fc\u015f\u00fcn\u00fcn. Bu \u00f6zellik, belirli bir s\u00fcre boyunca veya s\u00fcresiz olarak nesnelerin silinmesini veya \u00fczerine yaz\u0131lmas\u0131n\u0131 engeller. Bu, fidye yaz\u0131l\u0131m\u0131n\u0131n verileri manip\u00fcle etmesini imkans\u0131z hale getirir.\n<div class=\"code-container\">\n<pre><code># S3 Object Lock etkinle\u015ftirilmi\u015f bir kova olu\u015fturma \u00f6rne\u011fi\naws s3api create-bucket --bucket your-locked-bucket --object-lock-enabled-for-bucket<\/pre>\n<p><\/code>\n        <\/div>\n<p>        Bu kova olu\u015fturulduktan sonra, nesneler i\u00e7in saklama modlar\u0131 ve s\u00fcreleri ayarlanabilir.<\/li>\n<li><strong>Varsay\u0131lan \u015eifreleme (Default Encryption):<\/strong> T\u00fcm S3 kovalar\u0131n\u0131zda varsay\u0131lan \u015fifrelemeyi (SSE-S3, SSE-KMS veya SSE-C) etkinle\u015ftirin. Bu, verilerinizin depoda \u015fifreli olmas\u0131n\u0131 sa\u011flar ve yetkisiz eri\u015fim durumunda bile okunmas\u0131n\u0131 zorla\u015ft\u0131r\u0131r.<\/li>\n<\/ul>\n<h3>3. \u0130zleme ve Uyar\u0131lar: Erken Te\u015fhis Hayat Kurtar\u0131r<\/h3>\n<p>Sald\u0131r\u0131lar\u0131 erken tespit etmek, zarar\u0131 en aza indirmek i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n<ul>\n<li><strong>AWS CloudTrail ve S3 Eri\u015fim G\u00fcnl\u00fckleri:<\/strong> Bu g\u00fcnl\u00fckleri merkezi bir yerde toplay\u0131n (\u00f6rn. ba\u015fka bir S3 kovas\u0131 veya CloudWatch Logs) ve d\u00fczenli olarak izleyin. Anormal API \u00e7a\u011fr\u0131lar\u0131 (\u00f6rn. \u00e7ok say\u0131da <code>DeleteObject<\/code> veya <code>PutObject<\/code>), bilinmeyen IP adreslerinden gelen eri\u015fimler veya beklenmedik kova politikas\u0131 de\u011fi\u015fiklikleri i\u00e7in uyar\u0131lar olu\u015fturun.<\/li>\n<li><strong>Amazon GuardDuty:<\/strong> GuardDuty, tehdit tespiti i\u00e7in ak\u0131ll\u0131 bir hizmettir. AWS ortam\u0131n\u0131zdaki anormal davran\u0131\u015flar\u0131 (\u00f6rn. \u015f\u00fcpheli API \u00e7a\u011fr\u0131lar\u0131, bilinen k\u00f6t\u00fc niyetli IP adreslerinden gelen ba\u011flant\u0131lar) otomatik olarak izler ve sizi uyar\u0131r.<\/li>\n<li><strong>Amazon Macie:<\/strong> Macie, S3'teki hassas verileri ke\u015ffetmek ve bu verilere y\u00f6nelik \u015f\u00fcpheli etkinlikleri izlemek i\u00e7in kullan\u0131l\u0131r. Fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131nda, Macie hassas verilerin anormal \u015fekilde \u015fifrelendi\u011fini veya de\u011fi\u015ftirildi\u011fini tespit edebilir.<\/li>\n<li><strong>CloudWatch Alarmlar\u0131:<\/strong> Belirli CloudTrail olaylar\u0131 (\u00f6rn. <code>PutBucketPolicy<\/code>, <code>DeleteObject<\/code>) veya S3 kova metrikleri (\u00f6rn. anormal derecede y\u00fcksek yazma\/silme i\u015flemleri) i\u00e7in CloudWatch alarmlar\u0131 olu\u015fturun. Bu alarmlar sizi an\u0131nda e-posta, SMS veya Lambda fonksiyonlar\u0131 arac\u0131l\u0131\u011f\u0131yla bilgilendirebilir.<\/li>\n<\/ul>\n<p>Bu \u00f6nleyici tedbirler, S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131n\u0131n riskini \u00f6nemli \u00f6l\u00e7\u00fcde azaltacak ve olas\u0131 bir sald\u0131r\u0131 durumunda kurtarma s\u00fcrecini \u00e7ok daha kolay hale getirecektir. Unutmay\u0131n, siber g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir ve d\u00fczenli olarak g\u00f6zden ge\u00e7irilmelidir.<\/p>\n<h2>Vaka Analizi: Anadolu E-Ticaret A.\u015e.'nin S3 Fidye Yaz\u0131l\u0131m\u0131 Deneyimi<\/h2>\n<p>Bu b\u00f6l\u00fcmde, hayali bir T\u00fcrk e-ticaret \u015firketi olan Anadolu E-Ticaret A.\u015e.'nin ya\u015fad\u0131\u011f\u0131 S3 fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131 senaryosunu ve bu sald\u0131r\u0131ya nas\u0131l m\u00fcdahale ettiklerini inceleyece\u011fiz. Bu vaka analizi, yukar\u0131da bahsedilen teorik bilgileri ger\u00e7ek d\u00fcnya ba\u011flam\u0131nda somutla\u015ft\u0131rmay\u0131 ama\u00e7lamaktad\u0131r.<\/p>\n<h3>Senaryo: Bir Cuma Ak\u015fam\u0131 Panik<\/h3>\n<p>Anadolu E-Ticaret A.\u015e., T\u00fcrkiye'nin \u00f6nde gelen online perakendecilerinden biridir. \u00dcr\u00fcn g\u00f6rselleri, m\u00fc\u015fteri belgeleri ve sipari\u015f ge\u00e7mi\u015fleri gibi kritik verilerini AWS S3 \u00fczerinde depolamaktad\u0131rlar. Bir Cuma ak\u015fam\u0131, IT ekibinden Can Bey, AWS CloudWatch'tan gelen anormal bir alarm ile irkildi: \"S3:Y\u00fcksek DeleteObject Say\u0131s\u0131 - \u00dcr\u00fcn G\u00f6rselleri Kovas\u0131\". Ba\u015flang\u0131\u00e7ta bir otomasyon hatas\u0131 olabilece\u011fini d\u00fc\u015f\u00fcnd\u00fc, ancak k\u0131sa s\u00fcre sonra web sitesindeki \u00fcr\u00fcn g\u00f6rsellerinin kaybolmaya ba\u015flad\u0131\u011f\u0131n\u0131 ve yerine <code>.encrypted<\/code> uzant\u0131l\u0131 dosyalar\u0131n y\u00fcklendi\u011fini fark etti. Panik an\u0131yd\u0131.<\/p>\n<h3>\u0130lk Kritik Dakikalar: Can Bey'in H\u0131zl\u0131 M\u00fcdahalesi<\/h3>\n<p>Can Bey, daha \u00f6nce haz\u0131rlad\u0131klar\u0131 siber g\u00fcvenlik olay m\u00fcdahale plan\u0131n\u0131 hat\u0131rlayarak h\u0131zla harekete ge\u00e7ti:<\/p>\n<ol>\n<li><strong>Eri\u015fimi Engelleme ve \u0130zolasyon:<\/strong>\n<ul>\n<li>CloudTrail g\u00fcnl\u00fcklerini h\u0131zla inceledi ve sald\u0131r\u0131n\u0131n, eskiden geli\u015ftirme ortam\u0131nda kullan\u0131lan ancak kapat\u0131lmay\u0131 unutulmu\u015f bir IAM kullan\u0131c\u0131s\u0131n\u0131n eri\u015fim anahtar\u0131 \u00fczerinden geldi\u011fini tespit etti. Bu IAM kullan\u0131c\u0131s\u0131, yanl\u0131\u015fl\u0131kla geni\u015f S3 eri\u015fim izinlerine sahipti.<\/li>\n<li>Hemen AWS CLI \u00fczerinden bu IAM kullan\u0131c\u0131s\u0131n\u0131n eri\u015fim anahtar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakt\u0131 ve kullan\u0131c\u0131n\u0131n S3 ile ilgili t\u00fcm politikalar\u0131n\u0131 ay\u0131rd\u0131.\n<div class=\"code-container\">\n<pre><code>aws iam update-access-key --access-key-id AKIAJALISFODNN7EXAMPLE --status Inactive --user-name OldDevUser\naws iam detach-user-policy --user-name OldDevUser --policy-arn arn:aws:iam::123456789012:policy\/AmazonS3FullAccess<\/pre>\n<p><\/code>\n                <\/div>\n<\/li>\n<li>Sald\u0131rgan\u0131n IP adresini CloudTrail'den tespit ederek, \u015firket a\u011f\u0131 g\u00fcvenlik duvar\u0131na ve AWS WAF'a bu IP'den gelen t\u00fcm eri\u015fimleri engelleyen bir kural ekledi.<\/li>\n<\/ul>\n<\/li>\n<li><strong>Hasar Kapsam\u0131n\u0131 Belirleme:<\/strong>\n<ul>\n<li>Etkilenen kovan\u0131n (<code>anadolu-ecom-urun-gorselleri<\/code>) CloudTrail ve S3 eri\u015fim g\u00fcnl\u00fcklerini derinlemesine inceledi. Yakla\u015f\u0131k 2 saat boyunca binlerce dosyan\u0131n <code>PutObject<\/code> (\u015fifrelenmi\u015f versiyonlar\u0131 y\u00fckleme) ve <code>DeleteObject<\/code> (orijinal versiyonlar\u0131 silme veya silme i\u015faret\u00e7isi ekleme) operasyonlar\u0131na maruz kald\u0131\u011f\u0131n\u0131 g\u00f6rd\u00fc.<\/li>\n<li>Neyse ki, kova \u00fczerinde S3 versiyonlama etkinle\u015ftirilmi\u015fti. Bu, Can Bey'e b\u00fcy\u00fck bir rahatlama sa\u011flad\u0131.<\/li>\n<li>Sald\u0131r\u0131n\u0131n ba\u015flad\u0131\u011f\u0131 tam zaman\u0131 (TS\u0130 19:30) ve bitti\u011fi zaman\u0131 (TS\u0130 21:15) belirledi.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h3>Veri Kurtarma ve Sonu\u00e7<\/h3>\n<p>Can Bey, versiyonlaman\u0131n etkin oldu\u011funu bildi\u011fi i\u00e7in h\u0131zl\u0131ca kurtarma ad\u0131mlar\u0131na ge\u00e7ti:<\/p>\n<ol>\n<li><strong>Versiyonlama ile Kurtarma:<\/strong>\n<ul>\n<li>Etkilenen t\u00fcm nesneleri listeleyerek, her bir nesnenin sald\u0131r\u0131dan \u00f6nceki en son sa\u011flam versiyonunu tespit etti.<\/li>\n<li>AWS S3 Batch Operations kullanarak, sald\u0131r\u0131dan etkilenen t\u00fcm dosyalar\u0131 toplu olarak, sald\u0131r\u0131 \u00f6ncesi<br \/>\n","protected":false},"excerpt":{"rendered":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-41763","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?\" \/>\n<meta property=\"og:description\" content=\"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-14T06:04:38+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"18 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?\",\"datePublished\":\"2026-05-14T06:04:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\"},\"wordCount\":3290,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\",\"name\":\"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-05-14T06:04:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/","og_locale":"tr_TR","og_type":"article","og_title":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?","og_description":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?","og_url":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-05-14T06:04:38+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"18 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?","datePublished":"2026-05-14T06:04:38+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/"},"wordCount":3290,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/","url":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/","name":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-05-14T06:04:38+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/s3-fidye-yazilimi-saldirisi-ilk-kritik-dakikalarda-neler-yapmalisiniz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"S3 Fidye Yaz\u0131l\u0131m\u0131 Sald\u0131r\u0131s\u0131: \u0130lk Kritik Dakikalarda Neler Yapmal\u0131s\u0131n\u0131z?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/41763","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=41763"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/41763\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=41763"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=41763"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=41763"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}