{"id":59351,"date":"2026-10-23T11:02:41","date_gmt":"2026-10-23T01:02:41","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/23\/azure-cosmos-db-safe-key-rotation-that-prevents-credential-risk\/"},"modified":"2026-10-23T11:04:14","modified_gmt":"2026-10-23T01:04:14","slug":"azure-cosmos-db-safe-key-rotation-that-prevents-credential-risk","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/23\/azure-cosmos-db-safe-key-rotation-that-prevents-credential-risk\/","title":{"rendered":"Azure Cosmos DB Safe Key Rotation That Prevents Credential Risk"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post Azure Cosmos DB Safe Key Rotation That Prevents Credential Risk we will explain why database keys become difficult to control, how Microsoft\u2019s safer rotation checks help, and how to replace credentials without interrupting customers or internal operations.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">At a high level, Azure Cosmos DB is Microsoft\u2019s cloud database for applications that need fast access to large or rapidly changing datasets. An application must prove it is allowed to access the database, often by presenting a primary or secondary account key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Those keys work much like powerful shared passwords. The problem is rarely the strength of the key itself. The problem is that copies can end up in applications, deployment tools, scripts, support utilities and configuration files, with nobody completely certain which systems still depend on them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why an old Cosmos DB key creates a business risk<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Many organisations create a Cosmos DB account, connect the first application using the primary key and then leave that credential unchanged for years. It works, so it receives little attention.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Over time, however, the key may be copied into test environments, developer laptops, automation scripts or third-party integration platforms. A former employee, compromised application or exposed configuration file could provide an attacker with a credential that remains valid indefinitely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Read-write account keys can provide broad access to the database account. That makes a leaked key more serious than an ordinary user password with limited permissions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Regular rotation reduces the useful lifetime of a stolen credential. It also provides evidence that your organisation actively manages privileged access rather than simply trusting credentials created several years ago.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What safe key rotation actually does<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Cosmos DB provides two main account keys, known as the primary and secondary keys. Both can be valid at the same time, allowing an organisation to replace one while applications continue using the other.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The basic idea is straightforward:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Identify which key applications currently use.<\/li>\n<li>Regenerate the other, inactive key.<\/li>\n<li>Update applications to use the newly generated key.<\/li>\n<li>Confirm that every application, script and scheduled job still works.<\/li>\n<li>Regenerate the old key so any forgotten copies stop working.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The dangerous part is step three. If even one forgotten workload still uses the old key, rotating it can stop orders, customer logins, reporting jobs or operational integrations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft\u2019s safe rotation capability adds account key usage information and a check before key regeneration. When enabled, Azure can block the change if the check indicates that the selected key is still being used. The same protection can help when disabling key-based authentication completely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is an important safety net, but it should not replace a proper dependency inventory. Monthly reporting jobs, annual processes and rarely used support tools can be easy to miss. Safe rotation combines Azure\u2019s visibility with your team\u2019s knowledge of the business.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A common scenario in a growing business<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 200-person company with a customer portal, mobile application and finance reporting process connected to Cosmos DB. The technology team knows the portal uses the primary key, but nobody remembers that a finance script created two years earlier uses the secondary key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the secondary key is regenerated without checking, the customer portal remains healthy. The problem may not appear until month-end, when finance cannot produce a critical report.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A safer process identifies the script, assigns it an owner and includes it in testing. The rotation can then proceed without an outage, while the business gains confidence that old credential copies are no longer useful.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical safe rotation process<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Build a dependency register<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">List every application, integration, script and external supplier that connects to the Cosmos DB account. Record the business owner, technical owner, environment and authentication method.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Search application settings, deployment pipelines and secret stores for the account endpoint and connection-string references. Do not copy live keys into spreadsheets or support tickets while doing this.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Enable the safe rotation checks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The following Azure CLI command enables the relevant account capabilities. Azure CLI is Microsoft\u2019s command-line administration tool. Test this first in a non-production account because one capability is identified as a preview feature and availability can change.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>az cosmosdb update \\\n --resource-group &amp;lt;resource-group&amp;gt; \\\n --name &amp;lt;cosmos-account&amp;gt; \\\n --capabilities \\\n EnableAccountKeysLastUsageCheckInDisableLocalAuth \\\n EnableKeyCheckBeforeRegenerationPreview<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">You can confirm the enabled capabilities without displaying the actual account keys:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>az cosmosdb show \\\n --resource-group &amp;lt;resource-group&amp;gt; \\\n --name &amp;lt;cosmos-account&amp;gt; \\\n --query &quot;capabilities[].name&quot; \\\n --output table<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3. Regenerate only the inactive key<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If production applications currently use the primary key, regenerate the secondary key first. Never regenerate both keys together.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>az cosmosdb keys regenerate \\\n --resource-group &amp;lt;resource-group&amp;gt; \\\n --name &amp;lt;cosmos-account&amp;gt; \\\n --key-kind secondary<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Key regeneration may take from a minute to several hours for some accounts. Do not assume that clicking the button means every part of the process has completed immediately.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Update applications through a controlled secret store<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Place the new credential in Azure Key Vault, which securely stores passwords, keys and other sensitive information. Applications should retrieve the secret through controlled access rather than storing it directly in code.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Update one workload at a time where possible. Confirm database connections, customer transactions, background processing and error rates before moving to the next system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a more detailed operational sequence, see our Cosmos DB key rotation runbook for avoiding application outages.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Wait long enough to find forgotten workloads<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A five-minute health check is not enough. Your observation period should cover scheduled jobs, overnight processing, reporting cycles and integrations that run only on certain days.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Monitor failed requests and application logs. Confirm success with business teams, not only with a technical dashboard. A database connection can appear healthy while an important finance or customer process is still broken.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Regenerate the previously active key<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once every known workload uses the new key, regenerate the old one. This is the step that closes the security gap because forgotten copies of the previous credential will no longer work.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Record who approved the rotation, when it occurred, what was tested and whether any exceptions remain. That evidence is useful during customer reviews, cyber insurance assessments and compliance audits.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The better long-term answer is fewer shared keys<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Rotating shared keys is safer than leaving them unchanged, but the strongest credential is one your application does not need to store.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For supported Cosmos DB workloads, Microsoft Entra ID and managed identities allow an Azure application to use its own verified identity. Azure manages the authentication process, while role-based access control limits what the application can do.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In plain English, each application receives its own access rather than sharing one powerful database password. If an application is retired or compromised, its access can be removed without changing credentials for every other system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This approach also makes accountability clearer. You can see which identity accessed the service and grant only the permissions it needs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our guide to using managed identity in production and Azure CLI locally explains a practical way to remove stored production secrets without slowing developers down.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Do not confuse access keys with encryption keys<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cosmos DB account keys control who can connect to the database. Customer-managed encryption keys control how stored data is encrypted. They address different risks and require different operating processes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If your organisation is considering greater control over encryption keys for sovereignty or contractual reasons, read what to assess before adopting external key management in Azure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What technology leaders should require<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A named owner for every Cosmos DB account and connected workload.<\/li>\n<li>A documented rotation schedule based on business risk.<\/li>\n<li>Safe rotation checks enabled and tested before production use.<\/li>\n<li>Keys stored in Key Vault rather than code, documents or tickets.<\/li>\n<li>Monitoring that covers scheduled and low-frequency workloads.<\/li>\n<li>A plan to move suitable applications to managed identity.<\/li>\n<li>Azure Policy reporting for accounts with overdue key regeneration.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These controls support stronger security governance and the intent of the Essential Eight, the Australian Government\u2019s cybersecurity framework that many organisations use as a baseline. Key rotation alone does not make a business Essential Eight compliant, but unmanaged privileged credentials can undermine otherwise strong controls.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Reduce risk without creating another outage<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Safe Cosmos DB key rotation is not simply an Azure administration task. Done well, it reduces the value of leaked credentials, improves audit readiness and protects the availability of customer-facing services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The best result is a repeatable process today and a gradual move away from shared keys tomorrow.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc is a Melbourne-based Microsoft Partner and Wiz Security Integrator with more than 20 years of hands-on enterprise IT experience. If you are unsure where your Cosmos DB keys are being used, or whether rotating them could interrupt the business, we are happy to review the setup and help you plan a safe path forward \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Azure Cosmos DB keys often spread across apps, scripts and vendors. Learn how safe rotation reduces credential risk without creating an avoidable outage.<\/p>\n","protected":false},"author":1,"featured_media":59353,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[16,46,19,13],"tags":[],"class_list":["post-59351","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-azure","category-azure-key-vault","category-azure-security","category-blog"],"jetpack-related-posts":[{"id":59319,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/22\/cosmos-db-safe-key-rotation-without-costly-application-outages\/","url_meta":{"origin":59351,"position":0},"title":"Cosmos DB Safe Key Rotation Without Costly Application Outages","author":"CPI Staff","date":"October 22, 2026","format":false,"excerpt":"Rotating Cosmos DB keys should reduce security risk, not interrupt customers. This practical runbook explains how to replace credentials safely and build a path away from shared keys.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/cosmos-db-safe-key-rotation-without-costly-application-outages.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/cosmos-db-safe-key-rotation-without-costly-application-outages.png 1x, \/wp-content\/uploads\/2026\/10\/cosmos-db-safe-key-rotation-without-costly-application-outages.png 1.5x, \/wp-content\/uploads\/2026\/10\/cosmos-db-safe-key-rotation-without-costly-application-outages.png 2x, \/wp-content\/uploads\/2026\/10\/cosmos-db-safe-key-rotation-without-costly-application-outages.png 3x, \/wp-content\/uploads\/2026\/10\/cosmos-db-safe-key-rotation-without-costly-application-outages.png 4x"},"classes":[]},{"id":57871,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely\/","url_meta":{"origin":59351,"position":1},"title":"Building Audit Ready AI Agents with Azure Cosmos DB Securely","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents need more than clever answers. They need reliable memory, clear evidence trails, cost control, and security controls leaders can explain during an audit.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 1x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 1.5x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 2x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 3x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 4x"},"classes":[]},{"id":59222,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/19\/azure-arc-key-vault-extension-migration-before-2027-retirement\/","url_meta":{"origin":59351,"position":2},"title":"Azure Arc Key Vault Extension Migration Before 2027 Retirement","author":"CPI Staff","date":"October 19, 2026","format":false,"excerpt":"Microsoft will retire the Azure Arc Key Vault Secrets Provider extension on 9 October 2027. Here is a practical migration plan that reduces disruption, security risk and rushed decisions.","rel":"","context":"In &quot;Azure Key Vault&quot;","block_context":{"text":"Azure Key Vault","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/azure-key-vault\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/azure-arc-key-vault-extension-migration-before-2027-retirement.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/azure-arc-key-vault-extension-migration-before-2027-retirement.png 1x, \/wp-content\/uploads\/2026\/10\/azure-arc-key-vault-extension-migration-before-2027-retirement.png 1.5x, \/wp-content\/uploads\/2026\/10\/azure-arc-key-vault-extension-migration-before-2027-retirement.png 2x, \/wp-content\/uploads\/2026\/10\/azure-arc-key-vault-extension-migration-before-2027-retirement.png 3x, \/wp-content\/uploads\/2026\/10\/azure-arc-key-vault-extension-migration-before-2027-retirement.png 4x"},"classes":[]},{"id":59179,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/18\/keeping-your-keys-yours-with-external-key-management-in-azure\/","url_meta":{"origin":59351,"position":3},"title":"Keeping Your Keys Yours with External Key Management in Azure","author":"CPI Staff","date":"October 18, 2026","format":false,"excerpt":"External key management can strengthen data sovereignty, but it also introduces new costs and risks. Here is what Australian technology leaders should assess before adopting it.","rel":"","context":"In &quot;Azure Key Vault&quot;","block_context":{"text":"Azure Key Vault","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/azure-key-vault\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/keeping-your-keys-yours-with-external-key-management-in-azure.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/keeping-your-keys-yours-with-external-key-management-in-azure.png 1x, \/wp-content\/uploads\/2026\/10\/keeping-your-keys-yours-with-external-key-management-in-azure.png 1.5x, \/wp-content\/uploads\/2026\/10\/keeping-your-keys-yours-with-external-key-management-in-azure.png 2x, \/wp-content\/uploads\/2026\/10\/keeping-your-keys-yours-with-external-key-management-in-azure.png 3x, \/wp-content\/uploads\/2026\/10\/keeping-your-keys-yours-with-external-key-management-in-azure.png 4x"},"classes":[]},{"id":59164,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/17\/identity-at-every-hop-with-entra-agent-id-and-managed-identity\/","url_meta":{"origin":59351,"position":4},"title":"Identity at Every Hop with Entra Agent ID and Managed Identity","author":"CPI Staff","date":"October 17, 2026","format":false,"excerpt":"AI agents often cross several systems to complete one task. Learn how identity at every hop limits access, removes shared secrets and creates a reliable audit trail.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 1x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 1.5x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 2x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 3x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 4x"},"classes":[]},{"id":59176,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/18\/why-managed-hsm-external-keys-matter-for-australian-sovereignty\/","url_meta":{"origin":59351,"position":5},"title":"Why Managed HSM External Keys Matter for Australian Sovereignty","author":"CPI Staff","date":"October 18, 2026","format":false,"excerpt":"Microsoft\u2019s Managed HSM external key management is now generally available. Here is what Australian leaders need to know about key custody, data sovereignty, compliance and operational risk.","rel":"","context":"In &quot;Azure Key Vault&quot;","block_context":{"text":"Azure Key Vault","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/azure-key-vault\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/why-managed-hsm-external-keys-matter-for-australian-sovereignty.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/why-managed-hsm-external-keys-matter-for-australian-sovereignty.png 1x, \/wp-content\/uploads\/2026\/10\/why-managed-hsm-external-keys-matter-for-australian-sovereignty.png 1.5x, \/wp-content\/uploads\/2026\/10\/why-managed-hsm-external-keys-matter-for-australian-sovereignty.png 2x, \/wp-content\/uploads\/2026\/10\/why-managed-hsm-external-keys-matter-for-australian-sovereignty.png 3x, \/wp-content\/uploads\/2026\/10\/why-managed-hsm-external-keys-matter-for-australian-sovereignty.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/10\/azure-cosmos-db-safe-key-rotation-that-prevents-credential-risk.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59351"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59351\/revisions"}],"predecessor-version":[{"id":59352,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59351\/revisions\/59352"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59353"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}