Cloud Security

Bu bölüm, bulut-native uygulamalarda güvenlik, kimlik yönetimi, ağ güvenliği, secret management ve best practices konularını kapsar.

1. Cloud-Native Security Temelleri

• Shared responsibility model, cloud provider vs customer sorumlulukları
• Zero trust, defense in depth, least privilege

2. Identity & Access Management (IAM)

• User, group, role, policy, permission kavramları
• RBAC, ABAC, federated identity, SSO

3. Network Security

• VPC, subnet, security group, firewall, network ACL
• Private/public subnet, bastion host, VPN, peering

4. Secret Management

• Environment variable, external vault (HashiCorp Vault, AWS Secrets Manager)
• Secret rotation, audit log, access control

5. Compliance ve Audit

• Regulatory compliance (GDPR, HIPAA, PCI DSS)
• Audit log, policy enforcement, security baseline

6. Vulnerability Scanning ve Image Security

• Container image scanning, dependency scanning
• Patch management, CVE takip ve remediation

7. Monitoring ve Incident Response

• Security monitoring, SIEM, alerting, incident response
• Forensics, postmortem, threat intelligence

8. Best Practices ve Sık Karşılaşılan Sorunlar

• Misconfiguration, over-permission, public exposure
• Secret leakage, insecure default, compliance drift

Her başlık altında örnekler, araç kullanımı ve ileri seviye detaylar için ilgili alt bölümlere göz atabilirsiniz.