{"id":43873,"date":"2026-08-06T09:11:59","date_gmt":"2026-08-06T06:11:59","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/"},"modified":"2026-08-06T09:12:40","modified_gmt":"2026-08-06T06:12:40","slug":"aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/","title":{"rendered":"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin"},"content":{"rendered":"<h2>AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin<\/h2>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn bulut tabanl\u0131 d\u00fcnyas\u0131nda, dijital varl\u0131klar\u0131n korunmas\u0131 her zamankinden daha kritik. \u00d6zellikle Amazon Web Services (AWS) gibi platformlarda, kimlik ve eri\u015fim y\u00f6netimi (IAM &#8211; Identity and Access Management) g\u00fcvenlik stratejisinin temelini olu\u015fturur. Peki, uygulamalar\u0131n\u0131z\u0131n ve kullan\u0131c\u0131lar\u0131n\u0131z\u0131n AWS kaynaklar\u0131na eri\u015fimini sa\u011flayan IAM eri\u015fim anahtarlar\u0131n\u0131n (Access Keys) g\u00fcvenli\u011fini ne kadar ciddiye al\u0131yorsunuz? Bu anahtarlar\u0131n periyodik olarak d\u00f6nd\u00fcr\u00fclmesi (rotation), potansiyel g\u00fcvenlik ihlallerini \u00f6nlemek ve uyumluluk gereksinimlerini kar\u015f\u0131lamak i\u00e7in vazge\u00e7ilmez bir uygulamad\u0131r. Bu makalede, AWS IAM eri\u015fim anahtarlar\u0131n\u0131 neden ve nas\u0131l otomatik olarak d\u00f6nd\u00fcrece\u011finizi, bu s\u00fcrecin avantajlar\u0131n\u0131 ve kar\u015f\u0131la\u015fabilece\u011finiz zorluklar\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz. G\u00fcvenli\u011finizi bir \u00fcst seviyeye ta\u015f\u0131mak ve operasyonel verimlili\u011fi art\u0131rmak i\u00e7in ad\u0131mlar atarken, kesintisiz bir ge\u00e7i\u015f sa\u011flaman\u0131n yollar\u0131n\u0131 ke\u015ffedece\u011fiz.<\/p>\n<h2>AWS IAM Eri\u015fim Anahtarlar\u0131 Neden Bu Kadar \u00d6nemli ve Neden Otomatik D\u00f6nd\u00fcr\u00fclmeli?<\/h2>\n<p>AWS IAM eri\u015fim anahtarlar\u0131, AWS kaynaklar\u0131n\u0131za programl\u0131 eri\u015fim sa\u011flayan kimlik bilgileridir. Genellikle AWS Komut Sat\u0131r\u0131 Aray\u00fcz\u00fc (CLI &#8211; Command Line Interface), AWS Yaz\u0131l\u0131m Geli\u015ftirme Kitleri (SDK &#8211; Software Development Kits) ve do\u011frudan AWS API \u00e7a\u011fr\u0131lar\u0131 arac\u0131l\u0131\u011f\u0131yla kullan\u0131l\u0131rlar. Her eri\u015fim anahtar\u0131, bir &#8220;Eri\u015fim Anahtar\u0131 Kimli\u011fi&#8221; (Access Key ID) ve buna kar\u015f\u0131l\u0131k gelen bir &#8220;Gizli Eri\u015fim Anahtar\u0131&#8221;ndan (Secret Access Key) olu\u015fur. Bu ikili, bir kullan\u0131c\u0131 ad\u0131 ve \u015fifre kombinasyonu gibi d\u00fc\u015f\u00fcn\u00fclebilir; ancak \u015fifre yerine daha karma\u015f\u0131k, rastgele olu\u015fturulmu\u015f bir dizedir. Bu anahtarlar, AWS ortam\u0131n\u0131zda kritik operasyonlar ger\u00e7ekle\u015ftirebilen g\u00fc\u00e7l\u00fc kimlik bilgileridir. \u00d6rne\u011fin, bir sunucuya dosya y\u00fcklemek, bir veritaban\u0131ndan veri \u00e7ekmek veya yeni bir sanal makine ba\u015flatmak gibi eylemler bu anahtarlar arac\u0131l\u0131\u011f\u0131yla yetkilendirilir.<\/p>\n<p>Bu anahtarlar\u0131n g\u00fcc\u00fc ve \u00f6nemi g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, g\u00fcvenliklerinin sa\u011flanmas\u0131 b\u00fcy\u00fck bir sorumluluktur. Bir eri\u015fim anahtar\u0131 ele ge\u00e7irildi\u011finde veya s\u0131zd\u0131r\u0131ld\u0131\u011f\u0131nda, k\u00f6t\u00fc niyetli bir akt\u00f6r veya yetkisiz bir ki\u015fi, anahtar\u0131n ait oldu\u011fu IAM kullan\u0131c\u0131s\u0131n\u0131n veya rol\u00fcn\u00fcn sahip oldu\u011fu t\u00fcm izinlerle AWS kaynaklar\u0131n\u0131za eri\u015febilir. Bu durum, veri ihlallerine, hizmet kesintilerine, fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131na ve hatta finansal kay\u0131plara yol a\u00e7abilir. S\u0131zd\u0131r\u0131lm\u0131\u015f bir anahtar\u0131n k\u00f6t\u00fcye kullan\u0131lmas\u0131, genellikle fark edilmesi zaman alan ve geri d\u00f6n\u00fc\u015f\u00fc maliyetli sonu\u00e7lar do\u011furan felaket senaryolar\u0131na zemin haz\u0131rlar. \u00d6zellikle yaz\u0131l\u0131m depolar\u0131na (\u00f6rne\u011fin GitHub), log dosyalar\u0131na veya yap\u0131land\u0131rma dosyalar\u0131na yanl\u0131\u015fl\u0131kla b\u0131rak\u0131lan anahtarlar, siber sald\u0131rganlar i\u00e7in kolay hedefler haline gelir.<\/p>\n<p>\u0130\u015fte bu y\u00fczden, eri\u015fim anahtarlar\u0131n\u0131n d\u00fczenli olarak d\u00f6nd\u00fcr\u00fclmesi, yani belirli aral\u0131klarla yenileriyle de\u011fi\u015ftirilmesi bir &#8220;en iyi uygulama&#8221; (best practice) olarak kabul edilir. D\u00f6nd\u00fcrme, bir anahtar\u0131n \u00f6mr\u00fcn\u00fc k\u0131saltarak, ele ge\u00e7irilmesi durumunda potansiyel hasar s\u00fcresini ve kapsam\u0131n\u0131 s\u0131n\u0131rlar. \u00d6rne\u011fin, bir anahtar her 90 g\u00fcnde bir d\u00f6nd\u00fcr\u00fcl\u00fcyorsa, s\u0131zd\u0131r\u0131lan bir anahtar\u0131n en fazla 90 g\u00fcn boyunca ge\u00e7erli olaca\u011f\u0131 varsay\u0131l\u0131r. Bu, sald\u0131rgan\u0131n anahtar\u0131 kullanma s\u00fcresini \u00f6nemli \u00f6l\u00e7\u00fcde k\u0131s\u0131tlar. Ayr\u0131ca, PCI DSS, HIPAA, GDPR gibi bir\u00e7ok uyumluluk standard\u0131, kimlik bilgilerinin d\u00fczenli olarak d\u00f6nd\u00fcr\u00fclmesini zorunlu k\u0131lar. Manuel d\u00f6nd\u00fcrme s\u00fcre\u00e7leri zaman al\u0131c\u0131, hataya a\u00e7\u0131k ve operasyonel y\u00fck getiren i\u015flemler olabilir. Bu nedenle, otomatikle\u015ftirilmi\u015f d\u00f6nd\u00fcrme mekanizmalar\u0131, hem g\u00fcvenli\u011fi art\u0131rmak hem de operasyonel verimlili\u011fi sa\u011flamak i\u00e7in modern bulut stratejilerinin ayr\u0131lmaz bir par\u00e7as\u0131 haline gelmi\u015ftir.<\/p>\n<h2>AWS IAM Eri\u015fim Anahtarlar\u0131 ve G\u00fcvenlik Best Practices (En \u0130yi Uygulamalar) Nelerdir?<\/h2>\n<p>AWS IAM eri\u015fim anahtarlar\u0131, AWS ortam\u0131n\u0131zda programatik olarak kimlik do\u011frulaman\u0131n temelini olu\u015fturur. Bu anahtarlar, bir IAM kullan\u0131c\u0131s\u0131na \u00f6zel olarak olu\u015fturulur ve o kullan\u0131c\u0131n\u0131n sahip oldu\u011fu izinlerle AWS kaynaklar\u0131na eri\u015fim yetkisi verir. Eri\u015fim Anahtar\u0131 Kimli\u011fi (Access Key ID) genellikle herkese a\u00e7\u0131k bir tan\u0131mlay\u0131c\u0131 iken, Gizli Eri\u015fim Anahtar\u0131 (Secret Access Key) gizli tutulmas\u0131 gereken ve asla payla\u015f\u0131lmamas\u0131 gereken bir \u015fifre gibidir. Bu anahtarlar\u0131n do\u011fru kullan\u0131m\u0131 ve y\u00f6netimi, bulut g\u00fcvenli\u011finizin kilit noktalar\u0131ndan biridir. Anahtarlar, genellikle AWS SDK&#8217;lar\u0131 (\u00f6rne\u011fin Python i\u00e7in Boto3), AWS CLI veya do\u011frudan HTTP API \u00e7a\u011fr\u0131lar\u0131 yapan uygulamalar taraf\u0131ndan kullan\u0131l\u0131r. \u00d6rne\u011fin, bir web uygulamas\u0131, S3 (Simple Storage Service) \u00fczerindeki bir kova (bucket) i\u00e7ine dosya y\u00fcklemek i\u00e7in bir IAM kullan\u0131c\u0131s\u0131n\u0131n eri\u015fim anahtarlar\u0131n\u0131 kullanabilir.<\/p>\n<p>G\u00fcvenlik en iyi uygulamalar\u0131 (best practices) a\u00e7\u0131s\u0131ndan, eri\u015fim anahtarlar\u0131n\u0131n y\u00f6netimi konusunda dikkat edilmesi gereken birka\u00e7 temel ilke vard\u0131r:<\/p>\n<ul>\n<li><strong>En Az Ayr\u0131cal\u0131k (Least Privilege) Prensibi:<\/strong> Bir IAM kullan\u0131c\u0131s\u0131na veya rol\u00fcne yaln\u0131zca i\u015fini yapmas\u0131 i\u00e7in kesinlikle gerekli olan minimum izinleri atay\u0131n. \u00d6rne\u011fin, bir uygulama sadece S3&#8217;e yazma yetkisine ihtiya\u00e7 duyuyorsa, ona EC2 (Elastic Compute Cloud) instance&#8217;lar\u0131 ba\u015flatma yetkisi vermeyin. Bu, bir anahtar ele ge\u00e7irildi\u011finde potansiyel hasar\u0131n kapsam\u0131n\u0131 s\u0131n\u0131rlar.<\/li>\n<li><strong>IAM Rolleri ve Ge\u00e7ici Kimlik Bilgileri:<\/strong> M\u00fcmk\u00fcn oldu\u011funca uzun \u00f6m\u00fcrl\u00fc eri\u015fim anahtarlar\u0131 yerine IAM rolleri ve ge\u00e7ici kimlik bilgileri kullan\u0131n. EC2 instance&#8217;lar\u0131nda \u00e7al\u0131\u015fan uygulamalar, Lambda fonksiyonlar\u0131 veya ECS (Elastic Container Service) g\u00f6revleri gibi AWS hizmetlerinde bar\u0131nd\u0131r\u0131lan uygulamalar i\u00e7in IAM rolleri kullanmak en g\u00fcvenli y\u00f6ntemdir. Bu roller, uygulamalar\u0131n ihtiya\u00e7 duydu\u011fu izinleri dinamik olarak sa\u011flar ve eri\u015fim anahtarlar\u0131n\u0131 uygulaman\u0131n i\u00e7ine g\u00f6mme veya yap\u0131land\u0131rma dosyalar\u0131nda saklama ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r. Ge\u00e7ici kimlik bilgileri, belirli bir s\u00fcre sonra otomatik olarak sona erer, bu da s\u0131zd\u0131r\u0131lmalar\u0131 durumunda risklerini \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131r.<\/li>\n<li><strong>D\u00fczenli D\u00f6nd\u00fcrme:<\/strong> Eri\u015fim anahtarlar\u0131n\u0131 periyodik olarak d\u00f6nd\u00fcrmek, yani yenileriyle de\u011fi\u015ftirmek, g\u00fcvenlik risklerini azaltman\u0131n en etkili yollar\u0131ndan biridir. Bu, anahtar\u0131n ele ge\u00e7irilme veya s\u0131zd\u0131r\u0131lma durumunda k\u00f6t\u00fcye kullan\u0131m s\u00fcresini s\u0131n\u0131rlar. AWS, bu i\u015flemi otomatikle\u015ftirmek i\u00e7in \u00e7e\u015fitli ara\u00e7lar ve hizmetler sunar.<\/li>\n<li><strong>G\u00fcvenli Depolama:<\/strong> Eri\u015fim anahtarlar\u0131n\u0131 asla a\u00e7\u0131k metin olarak kod taban\u0131n\u0131zda, genel depolarda (\u00f6rne\u011fin GitHub) veya g\u00fcvensiz yap\u0131land\u0131rma dosyalar\u0131nda saklamay\u0131n. Bunun yerine, AWS Secrets Manager, AWS Systems Manager Parameter Store (SecureString tipi ile) veya Vault gibi g\u00fcvenli bir gizlilik y\u00f6netim sistemi kullan\u0131n. Bu hizmetler, anahtarlar\u0131n\u0131z\u0131 \u015fifreli bir \u015fekilde saklar ve uygulamalar\u0131n\u0131z\u0131n bunlar\u0131 g\u00fcvenli bir \u015fekilde almas\u0131n\u0131 sa\u011flar.<\/li>\n<li><strong>K\u00f6k Kullan\u0131c\u0131 (Root User) Anahtarlar\u0131ndan Ka\u00e7\u0131nma:<\/strong> AWS k\u00f6k kullan\u0131c\u0131s\u0131, hesab\u0131n\u0131zdaki t\u00fcm hizmetlere ve kaynaklara tam eri\u015fime sahiptir. K\u00f6k kullan\u0131c\u0131 eri\u015fim anahtarlar\u0131 olu\u015fturmaktan ve bunlar\u0131 programatik eri\u015fim i\u00e7in kullanmaktan kesinlikle ka\u00e7\u0131n\u0131n. Bunun yerine, y\u00f6netici (administrator) ayr\u0131cal\u0131klar\u0131na sahip bir IAM kullan\u0131c\u0131s\u0131 olu\u015fturun ve MFA (Multi-Factor Authentication &#8211; \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama) ile koruyun.<\/li>\n<li><strong>\u0130zleme ve Denetleme:<\/strong> AWS CloudTrail ve AWS Config gibi hizmetleri kullanarak IAM etkinliklerini ve eri\u015fim anahtar\u0131 kullan\u0131mlar\u0131n\u0131 s\u00fcrekli olarak izleyin. Anormal veya \u015f\u00fcpheli eri\u015fim kal\u0131plar\u0131n\u0131 tespit etmek i\u00e7in alarmlar kurun. Bu, potansiyel bir g\u00fcvenlik ihlalini erken a\u015famada fark etmenizi sa\u011flar.<\/li>\n<\/ul>\n<p>Bu en iyi uygulamalar\u0131 benimsemek, AWS ortam\u0131n\u0131z\u0131n genel g\u00fcvenlik duru\u015funu \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirecektir. \u00d6zellikle eri\u015fim anahtarlar\u0131n\u0131n otomatik d\u00f6nd\u00fcr\u00fclmesi, bu stratejilerin operasyonel olarak s\u00fcrd\u00fcr\u00fclebilir hale gelmesinde kritik bir rol oynar. Manuel s\u00fcre\u00e7ler hataya a\u00e7\u0131k ve zaman al\u0131c\u0131 oldu\u011fundan, otomasyon, g\u00fcvenlik ve verimlilik aras\u0131nda k\u00f6pr\u00fc kurar.<\/p>\n<h2>Otomatik D\u00f6nd\u00fcrmenin Avantajlar\u0131 ve Zorluklar\u0131 Nelerdir?<\/h2>\n<p>Eri\u015fim anahtarlar\u0131n\u0131 manuel olarak d\u00f6nd\u00fcrmek, \u00f6zellikle b\u00fcy\u00fck ve karma\u015f\u0131k AWS ortamlar\u0131nda, ciddi operasyonel y\u00fckler ve g\u00fcvenlik riskleri ta\u015f\u0131yabilir. Bu s\u00fcre\u00e7, genellikle bir geli\u015ftiricinin veya operasyon personelinin AWS konsoluna girmesini, yeni bir anahtar olu\u015fturmas\u0131n\u0131, eski anahtar\u0131 devre d\u0131\u015f\u0131 b\u0131rakmas\u0131n\u0131 ve ard\u0131ndan uygulamalar\u0131n yeni anahtar\u0131 kullanacak \u015fekilde g\u00fcncellenmesini gerektirir. Bu ad\u0131mlar, insan hatas\u0131na a\u00e7\u0131k olmas\u0131n\u0131n yan\u0131 s\u0131ra, potansiyel olarak hizmet kesintilerine de yol a\u00e7abilir. \u00d6rne\u011fin, yeni anahtar da\u011f\u0131t\u0131lmadan eski anahtar devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131rsa, uygulamalar\u0131n\u0131z\u0131n AWS kaynaklar\u0131na eri\u015fimi an\u0131nda kesilir. Bu t\u00fcr senaryolar, otomatik d\u00f6nd\u00fcrme mekanizmalar\u0131n\u0131n neden bu kadar de\u011ferli oldu\u011funu a\u00e7\u0131k\u00e7a ortaya koyar.<\/p>\n<h3>Otomatik D\u00f6nd\u00fcrmenin Avantajlar\u0131<\/h3>\n<p>Otomatik eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrmenin sundu\u011fu temel avantajlar \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>Geli\u015fmi\u015f G\u00fcvenlik Durumu:<\/strong> Anahtarlar\u0131n d\u00fczenli olarak ve otomatik bir \u015fekilde yenilenmesi, ele ge\u00e7irilmi\u015f bir anahtar\u0131n k\u00f6t\u00fcye kullan\u0131lma s\u00fcresini ve etkisini en aza indirir. Bu, g\u00fcvenlik ihlallerine kar\u015f\u0131 proaktif bir savunma hatt\u0131 olu\u015fturur.<\/li>\n<li><strong>Azalt\u0131lm\u0131\u015f \u0130nsan Hatas\u0131:<\/strong> Manuel s\u00fcre\u00e7lerde anahtar\u0131n yanl\u0131\u015fl\u0131kla bir yere kaydedilmesi, eski anahtar\u0131n zaman\u0131nda silinmemesi veya yeni anahtar\u0131n hatal\u0131 da\u011f\u0131t\u0131lmas\u0131 gibi durumlar s\u0131k\u00e7a ya\u015fan\u0131r. Otomasyon, bu t\u00fcr hatalar\u0131n \u00f6n\u00fcne ge\u00e7erek tutarl\u0131l\u0131k ve do\u011fruluk sa\u011flar.<\/li>\n<li><strong>Uyumluluk Kolayl\u0131\u011f\u0131:<\/strong> Bir\u00e7ok end\u00fcstri standard\u0131 ve d\u00fczenlemesi (\u00f6rne\u011fin SOC 2, ISO 27001, PCI DSS) kimlik bilgilerinin d\u00fczenli olarak d\u00f6nd\u00fcr\u00fclmesini zorunlu k\u0131lar. Otomatik d\u00f6nd\u00fcrme, bu uyumluluk gereksinimlerini s\u00fcrekli ve kolay bir \u015fekilde kar\u015f\u0131laman\u0131za yard\u0131mc\u0131 olur.<\/li>\n<li><strong>Operasyonel Verimlilik:<\/strong> Anahtar d\u00f6nd\u00fcrme gibi tekrarlayan ve rutin g\u00f6revlerin otomasyonu, DevOps (Geli\u015ftirme ve Operasyon) ekiplerinin daha stratejik g\u00f6revlere odaklanmas\u0131n\u0131 sa\u011flar. Zaman ve kaynak tasarrufu sa\u011flar.<\/li>\n<li><strong>Kesintisiz \u00c7al\u0131\u015fma (Zero-Downtime):<\/strong> Do\u011fru uyguland\u0131\u011f\u0131nda, otomatik d\u00f6nd\u00fcrme, uygulamalar\u0131n\u0131z\u0131n kesintiye u\u011framadan yeni anahtarlara ge\u00e7i\u015f yapmas\u0131n\u0131 sa\u011flayabilir. Bu genellikle iki aktif anahtar\u0131n k\u0131sa bir s\u00fcre boyunca kullan\u0131lmas\u0131 ve eski anahtar\u0131n yeni anahtar\u0131n ba\u015far\u0131yla devreye al\u0131nd\u0131\u011f\u0131ndan emin olunduktan sonra devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131yla ba\u015far\u0131l\u0131r.<\/li>\n<\/ul>\n<h3>Kar\u015f\u0131la\u015f\u0131labilecek Zorluklar<\/h3>\n<p>Otomatik d\u00f6nd\u00fcrme bir\u00e7ok avantaj sunsa da, uygulama s\u0131ras\u0131nda baz\u0131 zorluklarla kar\u015f\u0131la\u015fmak m\u00fcmk\u00fcnd\u00fcr:<\/p>\n<ul>\n<li><strong>Uygulama Ba\u011f\u0131ml\u0131l\u0131klar\u0131:<\/strong> Uygulamalar\u0131n\u0131z\u0131n eri\u015fim anahtarlar\u0131n\u0131 nas\u0131l t\u00fcketti\u011fini ve y\u00f6netti\u011fini anlamak kritik \u00f6neme sahiptir. Baz\u0131 eski veya \u00f6zel geli\u015ftirilmi\u015f uygulamalar, anahtarlar\u0131 sabit kodlanm\u0131\u015f (hardcoded) veya yap\u0131land\u0131rma dosyalar\u0131nda tutuyor olabilir. Bu durumda, otomatik d\u00f6nd\u00fcrme i\u015flemi \u00f6ncesinde bu uygulamalar\u0131n anahtar y\u00f6netimini modern y\u00f6ntemlere g\u00f6re g\u00fcncellemek gerekebilir.<\/li>\n<li><strong>Kesinti Riski:<\/strong> Yanl\u0131\u015f planlanm\u0131\u015f veya hatal\u0131 bir d\u00f6nd\u00fcrme beti\u011fi, uygulamalar\u0131n\u0131z\u0131n AWS kaynaklar\u0131na eri\u015fimini kesintiye u\u011fratabilir. \u00d6zellikle yeni anahtar\u0131n da\u011f\u0131t\u0131m\u0131 ve eski anahtar\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131 aras\u0131ndaki zamanlaman\u0131n do\u011fru ayarlanmas\u0131 \u00e7ok \u00f6nemlidir.<\/li>\n<li><strong>Anahtar Y\u00f6netimi:<\/strong> Yeni olu\u015fturulan anahtarlar\u0131n g\u00fcvenli bir \u015fekilde saklanmas\u0131 ve uygulamalar taraf\u0131ndan g\u00fcvenli bir \u015fekilde eri\u015filebilir olmas\u0131 gerekir. AWS Secrets Manager veya SSM Parameter Store gibi hizmetlerin entegrasyonu bu noktada devreye girer.<\/li>\n<li><strong>Geri Alma (Rollback) Mekanizmas\u0131:<\/strong> Otomatik d\u00f6nd\u00fcrme i\u015flemi s\u0131ras\u0131nda bir sorun ya\u015fanmas\u0131 durumunda, h\u0131zl\u0131 ve etkili bir geri alma mekanizmas\u0131na sahip olmak hayati \u00f6nem ta\u015f\u0131r. Bu, uygulamalar\u0131n eski, hala ge\u00e7erli olan anahtara geri d\u00f6nmesini sa\u011flayabilir.<\/li>\n<li><strong>\u0130zleme ve Bildirim:<\/strong> D\u00f6nd\u00fcrme s\u00fcrecinin ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131, herhangi bir hatan\u0131n olu\u015fup olu\u015fmad\u0131\u011f\u0131n\u0131 izlemek ve ilgili ekipleri bilgilendirmek i\u00e7in sa\u011flam bir izleme ve bildirim sistemine ihtiya\u00e7 vard\u0131r.<\/li>\n<\/ul>\n<p>Bu zorluklar\u0131n \u00fcstesinden gelmek i\u00e7in dikkatli bir planlama, test ve a\u015famal\u0131 bir da\u011f\u0131t\u0131m stratejisi benimsemek \u00f6nemlidir. Do\u011fru ara\u00e7lar ve yakla\u015f\u0131mlarla, otomatik eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrme, AWS g\u00fcvenli\u011finizin temel ta\u015flar\u0131ndan biri haline gelebilir.<\/p>\n<h2>Ad\u0131m Ad\u0131m Otomatik D\u00f6nd\u00fcrme Senaryosu: Bir Python Beti\u011fi ile Nas\u0131l Yap\u0131l\u0131r?<\/h2>\n<p>\u015eimdi pratik k\u0131sma ge\u00e7elim ve AWS IAM eri\u015fim anahtarlar\u0131n\u0131 bir Python beti\u011fi (script) kullanarak nas\u0131l otomatik olarak d\u00f6nd\u00fcrebilece\u011finizi ad\u0131m ad\u0131m inceleyelim. Bu senaryo, tek bir IAM kullan\u0131c\u0131s\u0131 i\u00e7in anahtar d\u00f6nd\u00fcrme i\u015flemini kapsayacak ve temel prensipleri anlaman\u0131za yard\u0131mc\u0131 olacakt\u0131r. Daha karma\u015f\u0131k ortamlar i\u00e7in bu temel \u00fczerine in\u015fa edebilirsiniz.<\/p>\n<h3>D\u00f6nd\u00fcrme \u0130\u015flemine Ba\u015flamadan \u00d6nce Neler Yap\u0131lmal\u0131?<\/h3>\n<p>Otomatik d\u00f6nd\u00fcrme beti\u011fini geli\u015ftirmeye ba\u015flamadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6n ko\u015fullar\u0131 ve haz\u0131rl\u0131klar\u0131 tamamlaman\u0131z gerekmektedir:<\/p>\n<ol>\n<li><strong>IAM Kullan\u0131c\u0131s\u0131 Se\u00e7imi:<\/strong> D\u00f6nd\u00fcrme i\u015flemini ger\u00e7ekle\u015ftirece\u011finiz IAM kullan\u0131c\u0131s\u0131n\u0131 belirleyin. Bu kullan\u0131c\u0131, genellikle bir uygulama veya hizmet taraf\u0131ndan kullan\u0131l\u0131r.<\/li>\n<li><strong>\u0130zinler:<\/strong> D\u00f6nd\u00fcrme beti\u011fini \u00e7al\u0131\u015ft\u0131racak IAM kullan\u0131c\u0131s\u0131n\u0131n (veya rol\u00fcn\u00fcn) a\u015fa\u011f\u0131daki IAM izinlerine sahip olmas\u0131 gerekmektedir:\n<ul>\n<li><code>iam:CreateAccessKey<\/code>: Yeni bir eri\u015fim anahtar\u0131 olu\u015fturmak i\u00e7in.<\/li>\n<li><code>iam:DeleteAccessKey<\/code>: Eski eri\u015fim anahtar\u0131n\u0131 silmek i\u00e7in.<\/li>\n<li><code>iam:ListAccessKeys<\/code>: Kullan\u0131c\u0131n\u0131n mevcut eri\u015fim anahtarlar\u0131n\u0131 listelemek i\u00e7in.<\/li>\n<li><code>iam:UpdateAccessKey<\/code>: Eri\u015fim anahtar\u0131n\u0131n durumunu de\u011fi\u015ftirmek (Aktif\/Pasif) i\u00e7in.<\/li>\n<\/ul>\n<p>E\u011fer yeni anahtar\u0131 AWS Systems Manager Parameter Store veya AWS Secrets Manager gibi bir hizmete kaydedecekseniz, bu hizmetlere yazma izinlerine de ihtiyac\u0131n\u0131z olacakt\u0131r (\u00f6rne\u011fin <code>ssm:PutParameter<\/code> veya <code>secretsmanager:PutSecretValue<\/code>).<\/p>\n<\/li>\n<li><strong>AWS CLI\/SDK Kurulumu:<\/strong> Python beti\u011fi i\u00e7in AWS SDK&#8217;s\u0131 olan Boto3&#8217;\u00fc kurman\u0131z gerekir.\n<div class=\"code-container\">\n<pre><code>pip install boto3<\/code><\/pre>\n<\/p><\/div>\n<p>Ayr\u0131ca, beti\u011fi \u00e7al\u0131\u015ft\u0131raca\u011f\u0131n\u0131z ortamda AWS kimlik bilgilerinizin yap\u0131land\u0131r\u0131lm\u0131\u015f olmas\u0131 gereklidir (\u00f6rne\u011fin <code>~\/.aws\/credentials<\/code> dosyas\u0131nda veya ortam de\u011fi\u015fkenleri arac\u0131l\u0131\u011f\u0131yla).<\/p>\n<\/li>\n<li><strong>Anahtar Da\u011f\u0131t\u0131m Mekanizmas\u0131:<\/strong> Yeni olu\u015fturulan anahtar\u0131n uygulamalar\u0131n\u0131za nas\u0131l da\u011f\u0131t\u0131laca\u011f\u0131n\u0131 belirleyin. Bu, otomatik d\u00f6nd\u00fcrme s\u00fcrecinin en kritik ad\u0131mlar\u0131ndan biridir. Pop\u00fcler y\u00f6ntemler \u015funlard\u0131r:\n<ul>\n<li><strong>AWS Systems Manager Parameter Store:<\/strong> Anahtarlar\u0131 g\u00fcvenli bir \u015fekilde depolamak ve uygulamalar\u0131n ihtiya\u00e7 duydu\u011funda \u00e7ekmesini sa\u011flamak i\u00e7in <code>SecureString<\/code> tipini kullan\u0131n.<\/li>\n<li><strong>AWS Secrets Manager:<\/strong> \u00d6zellikle anahtar d\u00f6nd\u00fcrme i\u00e7in tasarlanm\u0131\u015f bir hizmettir ve yerle\u015fik d\u00f6nd\u00fcrme \u00f6zelliklerine sahiptir.<\/li>\n<li><strong>Ortam De\u011fi\u015fkenleri:<\/strong> CI\/CD (S\u00fcrekli Entegrasyon\/S\u00fcrekli Da\u011f\u0131t\u0131m) boru hatlar\u0131 (pipelines) arac\u0131l\u0131\u011f\u0131yla ortam de\u011fi\u015fkenlerini g\u00fcncelleyerek anahtarlar\u0131 da\u011f\u0131tmak.<\/li>\n<\/ul>\n<p>Bu \u00f6rnekte, yeni anahtar\u0131 SSM Parameter Store&#8217;a kaydedece\u011fiz.<\/p>\n<\/li>\n<\/ol>\n<h3>Python Beti\u011fi ile Eri\u015fim Anahtar\u0131 D\u00f6nd\u00fcrme Ad\u0131mlar\u0131<\/h3>\n<p>Bir eri\u015fim anahtar\u0131n\u0131 kesintiye yol a\u00e7madan d\u00f6nd\u00fcrmek i\u00e7in genellikle a\u015fa\u011f\u0131daki ad\u0131mlar izlenir:<\/p>\n<ol>\n<li><strong>Mevcut Aktif Anahtarlar\u0131 Listele:<\/strong> D\u00f6nd\u00fcr\u00fclecek IAM kullan\u0131c\u0131s\u0131n\u0131n \u015fu anda ka\u00e7 tane aktif eri\u015fim anahtar\u0131 oldu\u011funu kontrol edin. AWS, bir IAM kullan\u0131c\u0131s\u0131 i\u00e7in ayn\u0131 anda en fazla iki aktif anahtara izin verir.<\/li>\n<li><strong>Yeni Eri\u015fim Anahtar\u0131 Olu\u015ftur:<\/strong> Kullan\u0131c\u0131 i\u00e7in yeni bir eri\u015fim anahtar\u0131 olu\u015fturun. Bu anahtar ba\u015flang\u0131\u00e7ta aktif durumda olacakt\u0131r.<\/li>\n<li><strong>Yeni Anahtar\u0131 G\u00fcvenli Bir Yere Kaydet ve Da\u011f\u0131t:<\/strong> Yeni olu\u015fturulan Eri\u015fim Anahtar\u0131 Kimli\u011fi ve Gizli Eri\u015fim Anahtar\u0131n\u0131, uygulamalar\u0131n\u0131z\u0131n eri\u015febilece\u011fi g\u00fcvenli bir gizlilik y\u00f6netim sistemine (\u00f6rne\u011fin SSM Parameter Store veya Secrets Manager) kaydedin.<\/li>\n<li><strong>Uygulamalar\u0131n Yeni Anahtar\u0131 Kullanmas\u0131n\u0131 Bekle\/Do\u011frula:<\/strong> Bu ad\u0131m, d\u00f6nd\u00fcrme i\u015fleminin en hassas k\u0131sm\u0131d\u0131r. Uygulamalar\u0131n\u0131z\u0131n yeni anahtar\u0131 al\u0131p kullanmaya ba\u015flad\u0131\u011f\u0131ndan emin olman\u0131z gerekir. Bu, genellikle bir s\u00fcre bekleyerek veya uygulaman\u0131n sa\u011fl\u0131k kontrollerini (health checks) izleyerek yap\u0131l\u0131r. Kesintisiz bir ge\u00e7i\u015f i\u00e7in, uygulamalar\u0131n\u0131z\u0131n dinamik olarak anahtar de\u011fi\u015fikliklerini alg\u0131lay\u0131p yeni anahtar\u0131 kullanmaya ba\u015flamas\u0131 \u00f6nemlidir.<\/li>\n<li><strong>Eski Anahtar\u0131 Devre D\u0131\u015f\u0131 B\u0131rak:<\/strong> Yeni anahtar\u0131n ba\u015far\u0131yla da\u011f\u0131t\u0131ld\u0131\u011f\u0131ndan ve uygulamalar taraf\u0131ndan kullan\u0131ld\u0131\u011f\u0131ndan emin olduktan sonra, eski anahtar\u0131 pasif duruma getirin. Bu, eski anahtar\u0131n art\u0131k AWS kaynaklar\u0131na eri\u015fim i\u00e7in kullan\u0131lamayaca\u011f\u0131 anlam\u0131na gelir, ancak hen\u00fcz silinmemi\u015ftir. Bu ad\u0131m, bir sorun \u00e7\u0131kmas\u0131 durumunda eski anahtar\u0131 tekrar aktif hale getirme imkan\u0131 sunar.<\/li>\n<li><strong>Eski Anahtar\u0131 Sil:<\/strong> Eski anahtar\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131ndan ve bir s\u00fcre sonra herhangi bir sorun ya\u015fanmad\u0131\u011f\u0131ndan emin olduktan sonra, eski anahtar\u0131 tamamen silin. Bu, anahtar\u0131n art\u0131k hi\u00e7bir \u015fekilde kullan\u0131lamayaca\u011f\u0131n\u0131 garanti eder.<\/li>\n<\/ol>\n<h3>Basit Bir Python Beti\u011fi: Detayl\u0131 \u0130nceleme<\/h3>\n<p>A\u015fa\u011f\u0131da, yukar\u0131da belirtilen ad\u0131mlar\u0131 uygulayan basit bir Python beti\u011fi bulunmaktad\u0131r. Bu betik, belirtilen bir IAM kullan\u0131c\u0131s\u0131n\u0131n eri\u015fim anahtar\u0131n\u0131 d\u00f6nd\u00fcr\u00fcr ve yeni anahtar\u0131 AWS Systems Manager Parameter Store&#8217;a kaydeder.<\/p>\n<div class=\"code-container\">\n<pre><code>\nimport boto3\nimport os\nimport time\n\n# --- Yap\u0131land\u0131rma ---\n# D\u00f6nd\u00fcr\u00fclecek IAM kullan\u0131c\u0131s\u0131n\u0131n ad\u0131. Kendi kullan\u0131c\u0131n\u0131zla de\u011fi\u015ftirin.\nIAM_USER_NAME = \"MyWebAppUser\"\n\n# Yeni anahtar\u0131n kaydedilece\u011fi SSM Parameter Store parametre adlar\u0131\nSSM_PARAM_ACCESS_KEY_ID = f'\/my-app\/iam-keys\/{IAM_USER_NAME}\/access-key-id'\nSSM_PARAM_SECRET_ACCESS_KEY = f'\/my-app\/iam-keys\/{IAM_USER_NAME}\/secret-access-key'\n\n# Uygulamalar\u0131n yeni anahtar\u0131 almas\u0131 i\u00e7in beklenecek s\u00fcre (saniye cinsinden)\nWAIT_TIME_FOR_APP_UPDATE = 300 # 5 dakika\n\n# Eski anahtar\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ktan sonra silinmesi i\u00e7in beklenecek s\u00fcre (saniye cinsinden)\nWAIT_TIME_FOR_OLD_KEY_DELETION = 60 # 1 dakika\n\ndef rotate_access_key(user_name):\n    \"\"\"\n    Belirtilen IAM kullan\u0131c\u0131s\u0131n\u0131n eri\u015fim anahtar\u0131n\u0131 d\u00f6nd\u00fcr\u00fcr.\n    Yeni anahtar\u0131 SSM Parameter Store'a kaydeder ve eski anahtar\u0131 siler.\n    \"\"\"\n    iam_client = boto3.client('iam')\n    ssm_client = boto3.client('ssm')\n\n    print(f\"--- Eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrme i\u015flemi ba\u015flat\u0131l\u0131yor: {user_name} ---\")\n\n    try:\n        # 1. Mevcut anahtarlar\u0131 listele\n        print(\"Mevcut eri\u015fim anahtarlar\u0131 kontrol ediliyor...\")\n        existing_keys = iam_client.list_access_keys(UserName=user_name)['AccessKeyMetadata']\n        active_keys = [key for key in existing_keys if key['Status'] == 'Active']\n\n        if len(active_keys) >= 2:\n            print(\"Uyar\u0131: Kullan\u0131c\u0131 i\u00e7in zaten iki aktif anahtar var. Eski anahtar\u0131n silinmesi gerekebilir.\")\n            # Bu senaryoda, en eski aktif anahtar\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131p silinmesi hedeflenir.\n            # Ancak, e\u011fer manuel olarak olu\u015fturulmu\u015f ikinci bir aktif anahtar varsa,\n            # bu betik varsay\u0131lan olarak ilk buldu\u011funu devre d\u0131\u015f\u0131 b\u0131rakacakt\u0131r.\n            # Daha geli\u015fmi\u015f senaryolarda, anahtar\u0131n olu\u015fturulma zaman\u0131na g\u00f6re se\u00e7im yap\u0131labilir.\n\n        # 2. Yeni eri\u015fim anahtar\u0131 olu\u015ftur\n        print(\"Yeni eri\u015fim anahtar\u0131 olu\u015fturuluyor...\")\n        new_key_response = iam_client.create_access_key(UserName=user_name)\n        new_access_key = new_key_response['AccessKey']\n        print(f\"Yeni anahtar ID: {new_access_key['AccessKeyId']}\")\n\n        # 3. Yeni anahtar\u0131 g\u00fcvenli bir yere kaydet (SSM Parameter Store)\n        print(\"Yeni anahtar SSM Parameter Store'a kaydediliyor...\")\n        ssm_client.put_parameter(\n            Name=SSM_PARAM_ACCESS_KEY_ID,\n            Description=f'IAM Access Key ID for {user_name}',\n            Value=new_access_key['AccessKeyId'],\n            Type='String',\n            Overwrite=True\n        )\n        ssm_client.put_parameter(\n            Name=SSM_PARAM_SECRET_ACCESS_KEY,\n            Description=f'IAM Secret Access Key for {user_name}',\n            Value=new_access_key['SecretAccessKey'],\n            Type='SecureString', # Gizli anahtarlar i\u00e7in SecureString kullan\u0131n\n            Overwrite=True\n        )\n        print(\"Yeni anahtar SSM Parameter Store'a ba\u015far\u0131yla kaydedildi.\")\n\n        # 4. Uygulamalar\u0131n yeni anahtar\u0131 kullanmas\u0131n\u0131 bekle\/do\u011frula\n        print(f\"Uygulamalar\u0131n yeni anahtar\u0131 kullanmas\u0131 i\u00e7in {WAIT_TIME_FOR_APP_UPDATE} saniye bekleniyor...\")\n        print(\"Bu s\u00fcre i\u00e7inde uygulamalar\u0131n\u0131z\u0131n SSM'den yeni anahtar\u0131 \u00e7ekip kullanmaya ba\u015flad\u0131\u011f\u0131ndan emin olun.\")\n        time.sleep(WAIT_TIME_FOR_APP_UPDATE)\n\n        # 5. Eski anahtar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\n        # Genellikle tek bir aktif anahtar\u0131n oldu\u011fu varsay\u0131l\u0131r ve o devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131r.\n        # E\u011fer birden fazla aktif anahtar varsa, bu mant\u0131k daha karma\u015f\u0131k olabilir.\n        if active_keys:\n            old_key_id = active_keys[0]['AccessKeyId']\n            print(f\"Eski anahtar devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131yor: {old_key_id}\")\n            iam_client.update_access_key(\n                UserName=user_name,\n                AccessKeyId=old_key_id,\n                Status='Inactive'\n            )\n            print(f\"Eski anahtar ({old_key_id}) devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131.\")\n            \n            # Opsiyonel: Eski anahtar\u0131n tamamen kullan\u0131lmad\u0131\u011f\u0131ndan emin olmak i\u00e7in ek bekleme\n            print(f\"Eski anahtar\u0131n tamamen devre d\u0131\u015f\u0131 kald\u0131\u011f\u0131ndan emin olmak i\u00e7in {WAIT_TIME_FOR_OLD_KEY_DELETION} saniye bekleniyor...\")\n            time.sleep(WAIT_TIME_FOR_OLD_KEY_DELETION)\n\n            # 6. Eski anahtar\u0131 sil\n            print(f\"Eski anahtar siliniyor: {old_key_id}\")\n            iam_client.delete_access_key(UserName=user_name, AccessKeyId=old_key_id)\n            print(f\"Eski anahtar ({old_key_id}) ba\u015far\u0131yla silindi.\")\n        else:\n            print(\"Silinecek eski aktif anahtar bulunamad\u0131. Belki de ilk d\u00f6nd\u00fcrme i\u015flemiydi veya zaten tek anahtar vard\u0131.\")\n\n        print(f\"--- Eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrme i\u015flemi ba\u015far\u0131yla tamamland\u0131: {user_name} ---\")\n\n    except Exception as e:\n        print(f\"Hata olu\u015ftu: {e}\")\n        # Hata durumunda, yeni olu\u015fturulan anahtar\u0131 silmek gibi bir geri alma i\u015flemi eklenebilir.\n        # \u00d6rne\u011fin, e\u011fer yeni anahtar olu\u015fturuldu ama SSM'e kaydedilemediyse, yeni anahtar\u0131 silmek isteyebilirsiniz.\n        if 'new_access_key' in locals():\n            print(f\"Hata nedeniyle yeni olu\u015fturulan anahtar siliniyor: {new_access_key['AccessKeyId']}\")\n            iam_client.delete_access_key(UserName=user_name, AccessKeyId=new_access_key['AccessKeyId'])\n\nif __name__ == \"__main__\":\n    rotate_access_key(IAM_USER_NAME)\n        <\/code><\/pre>\n<\/p><\/div>\n<p>Bu betik, temel bir d\u00f6nd\u00fcrme mekanizmas\u0131 sunar. Ger\u00e7ek d\u00fcnya senaryolar\u0131nda, hata i\u015fleme (error handling), loglama (logging), bildirimler (notifications) ve daha sofistike uygulama do\u011frulama ad\u0131mlar\u0131 eklemeniz gerekecektir. \u00d6zellikle &#8220;Uygulamalar\u0131n yeni anahtar\u0131 kullanmas\u0131n\u0131 bekle\/do\u011frula&#8221; ad\u0131m\u0131, uygulaman\u0131z\u0131n mimarisine ba\u011fl\u0131 olarak de\u011fi\u015fir ve en \u00e7ok dikkat gerektiren k\u0131s\u0131md\u0131r. Uygulaman\u0131z\u0131n yeni anahtar\u0131 nas\u0131l t\u00fcketti\u011fini (\u00f6rne\u011fin, her X dakikada bir SSM&#8217;den \u00e7ekiyor mu, yoksa bir yeniden ba\u015flatma m\u0131 gerekiyor?) anlamak ve buna g\u00f6re bir bekleme veya do\u011frulama mekanizmas\u0131 olu\u015fturmak hayati \u00f6nem ta\u015f\u0131r.<\/p>\n<h2>Ger\u00e7ek D\u00fcnya Senaryolar\u0131 ve \u0130leri D\u00fczey Stratejiler: Daha B\u00fcy\u00fck \u00d6l\u00e7ekte ve Kesintisiz D\u00f6nd\u00fcrme Nas\u0131l Yap\u0131l\u0131r?<\/h2>\n<p>Yukar\u0131daki Python beti\u011fi, temel bir eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrme mekanizmas\u0131 sunsa da, b\u00fcy\u00fck \u00f6l\u00e7ekli ve kritik uygulamalara sahip karma\u015f\u0131k AWS ortamlar\u0131nda daha geli\u015fmi\u015f stratejilere ihtiya\u00e7 duyulur. Kesintisiz \u00e7al\u0131\u015fma s\u00fcresi (zero-downtime) ve y\u00fcksek kullan\u0131labilirlik, bu senaryolarda \u00f6ncelikli hedeflerdir. \u0130\u015fte ger\u00e7ek d\u00fcnya senaryolar\u0131nda uygulayabilece\u011finiz baz\u0131 ileri d\u00fczey stratejiler ve entegrasyonlar:<\/p>\n<h3>AWS Secrets Manager ve SSM Parameter Store ile Anahtar Y\u00f6netimi<\/h3>\n<p>Eri\u015fim anahtarlar\u0131n\u0131 do\u011frudan bir betik i\u00e7inde y\u00f6netmek yerine, AWS&#8217;in yerel gizlilik y\u00f6netim hizmetlerini kullanmak \u00e7ok daha g\u00fcvenli ve \u00f6l\u00e7eklenebilir bir yakla\u015f\u0131md\u0131r:<\/p>\n<ul>\n<li><strong>AWS Secrets Manager:<\/strong> Bu hizmet, veritaban\u0131 kimlik bilgileri, API anahtarlar\u0131 ve di\u011fer gizli bilgileri kolayca d\u00f6nd\u00fcrmek, y\u00f6netmek ve almak i\u00e7in tasarlanm\u0131\u015ft\u0131r. Secrets Manager, bir\u00e7ok AWS hizmeti (\u00f6rne\u011fin RDS veritabanlar\u0131, Redshift, DocumentDB) i\u00e7in yerle\u015fik d\u00f6nd\u00fcrme i\u015flevselli\u011fi sunar. IAM eri\u015fim anahtarlar\u0131 i\u00e7in de \u00f6zel bir Lambda fonksiyonu yazarak d\u00f6nd\u00fcrmeyi otomatikle\u015ftirebilirsiniz. Bu fonksiyon, belirli bir zaman \u00e7izelgesine g\u00f6re tetiklenir, yeni bir IAM anahtar\u0131 olu\u015fturur, Secrets Manager&#8217;daki gizlili\u011fi g\u00fcnceller, uygulamalar\u0131n yeni anahtar\u0131 kullanmas\u0131n\u0131 bekler ve eski anahtar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131p siler. Secrets Manager&#8217;\u0131n en b\u00fcy\u00fck avantaj\u0131, anahtarlar\u0131n otomatik olarak d\u00f6nd\u00fcr\u00fclmesi ve uygulamalar\u0131n bu anahtarlar\u0131 kodlar\u0131nda a\u00e7\u0131k\u00e7a belirtmek yerine, Secrets Manager API&#8217;si arac\u0131l\u0131\u011f\u0131yla g\u00fcvenli bir \u015fekilde almas\u0131d\u0131r.<\/li>\n<li><strong>AWS Systems Manager Parameter Store:<\/strong> \u00d6zellikle <code>SecureString<\/code> parametre tipi ile, hassas verileri \u015fifreli bir \u015fekilde saklamak i\u00e7in kullan\u0131labilir. Uygulamalar\u0131n\u0131z, bu parametreleri AWS SDK&#8217;lar\u0131 arac\u0131l\u0131\u011f\u0131yla g\u00fcvenli bir \u015fekilde \u00e7ekebilir. Yukar\u0131daki Python beti\u011fi, yeni anahtar\u0131 buraya kaydetme \u00f6rne\u011fi sunmaktad\u0131r. Parameter Store, Secrets Manager&#8217;a g\u00f6re daha basit bir kullan\u0131m sunsa da, yerle\u015fik d\u00f6nd\u00fcrme \u00f6zelli\u011fi yoktur ve d\u00f6nd\u00fcrme mant\u0131\u011f\u0131n\u0131 sizin beti\u011finizde sa\u011flaman\u0131z gerekir. Ancak, maliyet etkinli\u011fi ve basitli\u011fi nedeniyle bir\u00e7ok senaryoda tercih edilebilir.<\/li>\n<\/ul>\n<p>Bu hizmetlerin kullan\u0131lmas\u0131, anahtarlar\u0131 g\u00fcvenli bir \u015fekilde depolaman\u0131n yan\u0131 s\u0131ra, anahtar y\u00f6netimi y\u00fck\u00fcn\u00fc de azalt\u0131r ve anahtar s\u0131z\u0131nt\u0131s\u0131 riskini minimize eder.<\/p>\n<h3>Kesintisiz Da\u011f\u0131t\u0131m (Zero-Downtime Deployment) ve Geri Alma (Rollback) Stratejileri<\/h3>\n<p>Uygulama kesintilerini \u00f6nlemek, otomatik d\u00f6nd\u00fcrme s\u00fcrecinin en kritik hedefidir. Bunun i\u00e7in a\u015fa\u011f\u0131daki stratejiler uygulanabilir:<\/p>\n<ul>\n<li><strong>\u00c7ift Anahtar Yakla\u015f\u0131m\u0131:<\/strong> Bir IAM kullan\u0131c\u0131s\u0131n\u0131n ayn\u0131 anda iki aktif eri\u015fim anahtar\u0131na sahip olabilmesi \u00f6zelli\u011finden yararlan\u0131n. D\u00f6nd\u00fcrme s\u0131ras\u0131nda:\n<ol>\n<li>Mevcut aktif anahtar (Anahtar A) kullan\u0131l\u0131rken, yeni bir anahtar (Anahtar B) olu\u015fturulur.<\/li>\n<li>Anahtar B, g\u00fcvenli bir \u015fekilde da\u011f\u0131t\u0131l\u0131r ve uygulamalar yeni anahtar\u0131 kullanmaya ba\u015flar.<\/li>\n<li>Uygulamalar\u0131n Anahtar B&#8217;yi ba\u015far\u0131yla kulland\u0131\u011f\u0131 do\u011fruland\u0131ktan sonra, Anahtar A devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131r ve ard\u0131ndan silinir.<\/li>\n<\/ol>\n<p>Bu y\u00f6ntem, uygulamalar\u0131n kesinti ya\u015famadan yeni anahtara ge\u00e7i\u015f yapmas\u0131n\u0131 sa\u011flar, \u00e7\u00fcnk\u00fc her zaman en az bir aktif anahtar bulunur.<\/p>\n<\/li>\n<li><strong>Mavi\/Ye\u015fil (Blue\/Green) Da\u011f\u0131t\u0131m:<\/strong> \u00d6zellikle konteynerize edilmi\u015f veya sunucusuz uygulamalar i\u00e7in, yeni anahtar\u0131 i\u00e7eren uygulaman\u0131n yeni bir s\u00fcr\u00fcm\u00fcn\u00fc (ye\u015fil ortam) da\u011f\u0131tabilirsiniz. Trafik yava\u015f\u00e7a bu yeni ortama y\u00f6nlendirilir. Herhangi bir sorun ya\u015fan\u0131rsa, trafik h\u0131zla eski ortama (mavi ortam) geri y\u00f6nlendirilebilir. Bu, anahtar d\u00f6nd\u00fcrme kaynakl\u0131 sorunlar\u0131n etkisini izole etmenizi sa\u011flar.<\/li>\n<li><strong>Canary Da\u011f\u0131t\u0131mlar\u0131:<\/strong> Yeni anahtar\u0131 i\u00e7eren uygulaman\u0131n yeni s\u00fcr\u00fcm\u00fcn\u00fc k\u00fc\u00e7\u00fck bir kullan\u0131c\u0131 alt k\u00fcmesine da\u011f\u0131t\u0131n. Ba\u015far\u0131l\u0131 oldu\u011funu do\u011frulad\u0131ktan sonra, kademeli olarak daha fazla kullan\u0131c\u0131ya yay\u0131nlay\u0131n.<\/li>\n<li><strong>Sa\u011fl\u0131k Kontrolleri ve \u0130zleme:<\/strong> Uygulamalar\u0131n\u0131z\u0131n AWS kaynaklar\u0131na eri\u015fimini izleyen kapsaml\u0131 sa\u011fl\u0131k kontrolleri ve alarmlar kurun. Anahtar d\u00f6nd\u00fcrme i\u015flemi s\u0131ras\u0131nda herhangi bir eri\u015fim hatas\u0131 tespit edildi\u011finde otomatik olarak geri alma (rollback) veya bildirim tetiklenebilir.<\/li>\n<li><strong>Geri Alma Plan\u0131:<\/strong> Her zaman bir geri alma plan\u0131na sahip olun. Bu, eski anahtar\u0131 pasif hale getirdikten sonra bir sorun ya\u015fan\u0131rsa, onu h\u0131zla tekrar aktif hale getirme yetene\u011fini i\u00e7erir. Eski anahtar\u0131 silmeden \u00f6nce yeterli bir &#8220;bekleme s\u00fcresi&#8221; tan\u0131mak, bu esnekli\u011fi sa\u011flar.<\/li>\n<\/ul>\n<h3>CI\/CD S\u00fcre\u00e7lerine Entegrasyon<\/h3>\n<p>Otomatik eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrmeyi, mevcut S\u00fcrekli Entegrasyon\/S\u00fcrekli Da\u011f\u0131t\u0131m (CI\/CD) boru hatlar\u0131n\u0131za entegre etmek, operasyonel y\u00fck\u00fc daha da azalt\u0131r ve g\u00fcvenlik uygulamalar\u0131n\u0131 geli\u015ftirme ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fcn do\u011fal bir par\u00e7as\u0131 haline getirir:<\/p>\n<ul>\n<li><strong>Zamanlanm\u0131\u015f \u00c7al\u0131\u015ft\u0131rmalar:<\/strong> AWS Lambda ve Amazon EventBridge (CloudWatch Events) kullanarak d\u00f6nd\u00fcrme beti\u011finizi belirli aral\u0131klarla (\u00f6rne\u011fin, her 90 g\u00fcnde bir) otomatik olarak tetikleyebilirsiniz.<\/li>\n<li><strong>CI\/CD Boru Hatt\u0131 Entegrasyonu:<\/strong> Anahtar d\u00f6nd\u00fcrme beti\u011fini, da\u011f\u0131t\u0131m boru hatt\u0131n\u0131z\u0131n bir a\u015famas\u0131 olarak dahil edin. \u00d6rne\u011fin, bir uygulama yeni bir ortama da\u011f\u0131t\u0131lmadan \u00f6nce veya da\u011f\u0131t\u0131ld\u0131ktan hemen sonra anahtarlar d\u00f6nd\u00fcr\u00fclebilir. Bu, uygulaman\u0131n her zaman g\u00fcncel ve g\u00fcvenli anahtarlar\u0131 kullanmas\u0131n\u0131 sa\u011flar.<\/li>\n<li><strong>IAM Rolleri ve K\u0131sa S\u00fcreli Kimlik Bilgileri:<\/strong> Uygulamalar\u0131n\u0131z\u0131n uzun \u00f6m\u00fcrl\u00fc IAM eri\u015fim anahtarlar\u0131 yerine, m\u00fcmk\u00fcn olan her yerde k\u0131sa \u00f6m\u00fcrl\u00fc IAM rolleri (IAM Roles) kullanmas\u0131n\u0131 sa\u011flay\u0131n. \u00d6rne\u011fin, bir EC2 instance&#8217;\u0131 \u00fczerindeki bir uygulama, kendi IAM rol\u00fcn\u00fc \u00fcstlenerek ge\u00e7ici kimlik bilgileri alabilir ve bu kimlik bilgileri belirli bir s\u00fcre sonra otomatik olarak sona erer. Bu, eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrme ihtiyac\u0131n\u0131 tamamen ortadan kald\u0131rabilir veya en az\u0131ndan uzun \u00f6m\u00fcrl\u00fc anahtar say\u0131s\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde azaltabilir.<\/li>\n<\/ul>\n<p>Bu ileri d\u00fczey stratejileri uygulayarak, AWS IAM eri\u015fim anahtar\u0131 d\u00f6nd\u00fcrme s\u00fcrecinizi daha sa\u011flam, g\u00fcvenli ve kesintisiz hale getirebilirsiniz. Unutmay\u0131n, g\u00fcvenlik s\u00fcrekli bir yolculuktur ve otomasyon bu yolculukta en g\u00fc\u00e7l\u00fc m\u00fcttefiklerinizden biridir.<\/p>\n<h2>S\u0131k\u00e7a Sorulan Sorular<\/h2>\n<dl>\n<dt>S1: Eri\u015fim anahtarlar\u0131m\u0131 ne s\u0131kl\u0131kla d\u00f6nd\u00fcrmeliyim?<\/dt>\n<dd>C1: Bu, g\u00fcvenlik politikalar\u0131n\u0131za, uyumluluk gereksinimlerinize ve risk tolerans\u0131n\u0131za ba\u011fl\u0131d\u0131r. Genel bir &#8220;en iyi uygulama&#8221; olarak, anahtarlar\u0131n her 60 ila 90 g\u00fcnde bir d\u00f6nd\u00fcr\u00fclmesi \u00f6nerilir. Ancak, bir anahtar\u0131n ele ge\u00e7irildi\u011finden \u015f\u00fcpheleniliyorsa veya bir \u00e7al\u0131\u015fan i\u015ften ayr\u0131l\u0131rsa, derhal d\u00f6nd\u00fcr\u00fclmelidir.<\/dd>\n<dt>S2: T\u00fcm uygulamalar\u0131m i\u00e7in ayn\u0131 IAM kullan\u0131c\u0131s\u0131n\u0131 m\u0131 kullanmal\u0131y\u0131m?<\/dt>\n<dd>C2: Hay\u0131r, bu &#8220;en az ayr\u0131cal\u0131k&#8221; prensibine ayk\u0131r\u0131d\u0131r. Her uygulama veya hizmet i\u00e7in ayr\u0131 bir IAM kullan\u0131c\u0131s\u0131 veya tercihen bir IAM rol\u00fc kullanmal\u0131s\u0131n\u0131z. Bu, bir anahtar\u0131n s\u0131zd\u0131r\u0131lmas\u0131 durumunda potansiyel hasar\u0131n kapsam\u0131n\u0131 s\u0131n\u0131rlar ve izin y\u00f6netimini kolayla\u015ft\u0131r\u0131r.<\/dd>\n<dt>S3: Otomatik d\u00f6nd\u00fcrme i\u015flemi s\u0131ras\u0131nda bir sorun olursa ne yapmal\u0131y\u0131m?<\/dt>\n<dd>C3: Sa\u011flam bir hata i\u015fleme (error handling), loglama (logging) ve bildirim (notification) mekanizmas\u0131 kurmal\u0131s\u0131n\u0131z. E\u011fer sorun yeni anahtar\u0131n da\u011f\u0131t\u0131m\u0131yla ilgiliyse ve eski anahtar hala aktifse, eski anahtar\u0131 kullanmaya devam edebilirsiniz. Eski anahtar pasif durumdaysa, onu tekrar aktif hale getirerek ge\u00e7ici bir \u00e7\u00f6z\u00fcm sa\u011flayabilirsiniz. Sorunun k\u00f6k nedenini belirleyip gidermek i\u00e7in loglar\u0131 incelemelisiniz.<\/dd>\n<dt>S4: Secrets Manager&#8217;\u0131n yerle\u015fik d\u00f6nd\u00fcrme \u00f6zelli\u011fini ne zaman kullanmal\u0131y\u0131m?<\/dt>\n<dd>C4: Secrets Manager&#8217;\u0131n yerle\u015fik d\u00f6nd\u00fcrme \u00f6zelli\u011fini, destekledi\u011fi hizmetler (\u00f6rne\u011fin RDS, Redshift, DocumentDB) i\u00e7in kimlik bilgilerini d\u00f6nd\u00fcr\u00fcrken kesinlikle kullanmal\u0131s\u0131n\u0131z. IAM eri\u015fim anahtarlar\u0131 i\u00e7in de \u00f6zel bir Lambda d\u00f6nd\u00fcrme fonksiyonu yazarak bu \u00f6zelli\u011fi kullanabilirsiniz. Bu, anahtar d\u00f6nd\u00fcrme karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde azalt\u0131r ve AWS taraf\u0131ndan y\u00f6netilen g\u00fcvenli bir \u00e7\u00f6z\u00fcm sunar.<\/dd>\n<dt>S5: K\u00f6k (Root) kullan\u0131c\u0131 eri\u015fim anahtarlar\u0131n\u0131 da d\u00f6nd\u00fcrmeli miyim?<\/dt>\n<dd>C5: En iyi uygulama olarak, AWS k\u00f6k kullan\u0131c\u0131s\u0131 i\u00e7in eri\u015fim anahtarlar\u0131 olu\u015fturmaktan tamamen ka\u00e7\u0131nmal\u0131s\u0131n\u0131z. K\u00f6k kullan\u0131c\u0131 anahtarlar\u0131 yerine, y\u00f6netici ayr\u0131cal\u0131klar\u0131na sahip bir IAM kullan\u0131c\u0131s\u0131 olu\u015fturun ve MFA ile koruyun. K\u00f6k kullan\u0131c\u0131 yaln\u0131zca \u00e7ok nadir ve kritik g\u00f6revler i\u00e7in kullan\u0131lmal\u0131, bu g\u00f6revler i\u00e7in de MFA ile konsol eri\u015fimi tercih edilmelidir.<\/dd>\n<\/dl>\n<h2>Sonu\u00e7: G\u00fcvenli\u011finizi Otomatikle\u015ftirerek Gelece\u011fe Haz\u0131rlan\u0131n<\/h2>\n<p>AWS IAM eri\u015fim anahtarlar\u0131n\u0131n otomatik olarak d\u00f6nd\u00fcr\u00fclmesi, modern bulut g\u00fcvenli\u011finin temel ta\u015flar\u0131ndan biridir. Bu makale boyunca ele ald\u0131\u011f\u0131m\u0131z gibi, anahtarlar\u0131n d\u00fczenli olarak yenilenmesi, potansiyel g\u00fcvenlik ihlallerine kar\u015f\u0131 proaktif bir savunma mekanizmas\u0131 olu\u015fturur, uyumluluk gereksinimlerini kar\u015f\u0131lamaya yard\u0131mc\u0131 olur ve operasyonel verimlili\u011fi art\u0131r\u0131r. Manuel d\u00f6nd\u00fcrme s\u00fcre\u00e7lerinin getirdi\u011fi zorluklar ve insan hatas\u0131 riskleri g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, Python betikleri, AWS Secrets Manager ve SSM Parameter Store gibi otomasyon ara\u00e7lar\u0131, bu kritik g\u00f6revi daha y\u00f6netilebilir ve g\u00fcvenli hale getirir.<\/p>\n<p>Uygulama ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 anlamak, kesintisiz da\u011f\u0131t\u0131m stratejileri geli\u015ftirmek ve sa\u011flam bir izleme\/geri alma plan\u0131na sahip olmak, otomatik d\u00f6nd\u00fcrme s\u00fcrecinin ba\u015far\u0131l\u0131 bir \u015fekilde uygulanmas\u0131nda kilit rol oynar. Unutmay\u0131n, g\u00fcvenlik statik bir durum de\u011fil, s\u00fcrekli bir s\u00fcre\u00e7tir. Eri\u015fim anahtarlar\u0131n\u0131z\u0131 otomatikle\u015ftirmek, siber tehditlere kar\u015f\u0131 daha diren\u00e7li bir duru\u015f sergilemenizi sa\u011flar ve ekiplerinizin daha stratejik g\u00fcvenlik giri\u015fimlerine odaklanmas\u0131na olanak tan\u0131r. AWS ortam\u0131n\u0131z\u0131n g\u00fcvenli\u011fini g\u00fc\u00e7lendirmek ve gelece\u011fe haz\u0131r olmak i\u00e7in bu uygulamalar\u0131 kendi altyap\u0131n\u0131zda benimsemeyi \u015fiddetle tavsiye ederiz.<\/p>\n<p>#AWS #IAM #G\u00fcvenlik #DevOps #Python #Otomasyon #CloudComputing<\/p>\n<div class=\"github-example-link\"><strong>\u00d6rnek kod:<\/strong> <a href=\"https:\/\/github.com\/fatihsoysalcom\/aws-iam-access-key-rotation-script\" target=\"_blank\" rel=\"noopener noreferrer\">github.com\/fatihsoysalcom\/aws-iam-access-key-rotation-script<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"G\u00fcn\u00fcm\u00fcz\u00fcn bulut tabanl\u0131 d\u00fcnyas\u0131nda, dijital varl\u0131klar\u0131n korunmas\u0131 her zamankinden daha kritik.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1406],"tags":[],"class_list":{"0":"post-43873","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-aws","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin\" \/>\n<meta property=\"og:description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn bulut tabanl\u0131 d\u00fcnyas\u0131nda, dijital varl\u0131klar\u0131n korunmas\u0131 her zamankinden daha kritik.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-06T06:11:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-06T06:12:40+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"28 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin\",\"datePublished\":\"2026-08-06T06:11:59+00:00\",\"dateModified\":\"2026-08-06T06:12:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\"},\"wordCount\":4828,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"AWS\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\",\"name\":\"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-08-06T06:11:59+00:00\",\"dateModified\":\"2026-08-06T06:12:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/","og_locale":"tr_TR","og_type":"article","og_title":"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin","og_description":"G\u00fcn\u00fcm\u00fcz\u00fcn bulut tabanl\u0131 d\u00fcnyas\u0131nda, dijital varl\u0131klar\u0131n korunmas\u0131 her zamankinden daha kritik.","og_url":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-08-06T06:11:59+00:00","article_modified_time":"2026-08-06T06:12:40+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"28 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin","datePublished":"2026-08-06T06:11:59+00:00","dateModified":"2026-08-06T06:12:40+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/"},"wordCount":4828,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["AWS"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/","url":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/","name":"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-08-06T06:11:59+00:00","dateModified":"2026-08-06T06:12:40+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/aws-iam-erisim-anahtarlarini-otomatik-olarak-dondurme-guvenliginizi-guclendirin\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AWS IAM Eri\u015fim Anahtarlar\u0131n\u0131 Otomatik Olarak D\u00f6nd\u00fcrme: G\u00fcvenli\u011finizi G\u00fc\u00e7lendirin"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=43873"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43873\/revisions"}],"predecessor-version":[{"id":43874,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43873\/revisions\/43874"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=43873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=43873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=43873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}