{"id":59630,"date":"2026-11-07T14:01:44","date_gmt":"2026-11-07T04:01:44","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/07\/why-identity-aware-azure-policy-changes-cloud-governance-in-2026\/"},"modified":"2026-11-07T14:03:54","modified_gmt":"2026-11-07T04:03:54","slug":"why-identity-aware-azure-policy-changes-cloud-governance-in-2026","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/07\/why-identity-aware-azure-policy-changes-cloud-governance-in-2026\/","title":{"rendered":"Why Identity-Aware Azure Policy Changes Cloud Governance in 2026"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post <strong>Why Identity-Aware Azure Policy Changes Cloud Governance in 2026<\/strong> we will explain how Australian CIOs can control not only what gets deployed in Azure, but also who or what is allowed to make sensitive changes.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">For many mid-market organisations, the problem is not a complete lack of cloud controls. It is that those controls treat every authorised request in much the same way. An administrator working through the Azure portal, an approved deployment pipeline and an overlooked software identity may all be able to submit the same change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Identity-aware Azure Policy adds another question to the decision: <em>who or what is making this request?<\/em> That distinction can reduce the risk created by excessive administrator access, unmanaged automation and compromised credentials.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What identity-aware Azure Policy actually means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Policy is Microsoft\u2019s service for setting rules across Azure. It can check whether cloud resources meet company requirements, block unacceptable configurations and automatically correct certain settings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Traditionally, these rules focused mainly on the resource itself. A policy might require encryption, restrict deployments to approved Australian regions or prevent a database from being exposed to the public internet.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Policy can now use the <code>requestContext().identity<\/code> function to inspect information about the identity submitting a create or update request. This may include whether the caller is a person or application, the application used to submit the request, the caller\u2019s object identifier and authentication context such as multi-factor authentication indicators.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This creates a request-time control. For example, a business could require production infrastructure changes to come through an approved deployment system rather than from an administrator making a direct portal change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Importantly, this does not replace Microsoft Entra ID, role-based access control or Privileged Identity Management. These services decide who can receive access. Identity-aware policy adds another checkpoint when that access is used.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why the old governance model is no longer enough<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most Azure governance models were designed around subscriptions, resource groups and technical configurations. Identity was often handled separately by another team or reviewed during an annual audit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That separation creates gaps. A person can have a legitimate administrator role but still use it in an unsafe way. An automation account can also retain access long after the original project has finished.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This matters as organisations introduce AI agents, infrastructure automation and more third-party platforms. Each one may operate through a software identity with permissions to create, modify or connect Azure resources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are already working through our 90-day AI agent governance plan, identity-aware Azure Policy provides an additional way to control what approved agents and deployment tools can change.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Five changes CIOs should make to their governance model<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Separate access rights from acceptable actions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Being authorised to administer a subscription should not automatically mean every method of making a change is acceptable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use Azure role-based access control to grant the minimum required permissions. Use Microsoft Entra Privileged Identity Management, which provides temporary and approval-based administrator access, for higher-risk roles. Then use identity-aware policy to place conditions around sensitive changes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This layered approach limits both the number of privileged users and what can happen when privileged access is activated. Microsoft\u2019s Azure landing zone guidance similarly recommends narrow access scopes and just-in-time privileged access.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Treat software identities like employees<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Automation identities rarely resign, change roles or complain when their access is excessive. Unless someone reviews them, they can remain active indefinitely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Create an inventory of deployment pipelines, applications, managed identities and AI agents that can modify Azure. Each identity should have a business owner, a defined purpose, minimum permissions and a review date.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Identity-aware policy can then restrict high-risk resource changes to approved application identifiers. An unknown script may have valid credentials, but its request can still be denied because it is not coming through an approved tool.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Protect the changes that could cause the most damage<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Do not begin by applying identity conditions to every Azure operation. Start with changes that could expose data, weaken security or cause a major outage.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Public network access for databases, storage accounts and AI services.<\/li>\n<li>Changes to Key Vaults, which store passwords, certificates and encryption keys.<\/li>\n<li>Production networking and firewall configurations.<\/li>\n<li>Security monitoring, backup and recovery settings.<\/li>\n<li>Creation of powerful managed identities or access assignments.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For resilience-related controls, connect this work with the Azure resilience checklist for Australian mid-market CIOs. A backup strategy is much stronger when unapproved tools cannot quietly weaken its supporting configuration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Maintain two policy portfolios<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Identity-aware rules behave differently from traditional compliance policies. They make decisions when a request occurs, but their scheduled compliance scans are marked as not applicable because there is no live caller identity to inspect later.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your governance reporting should therefore distinguish between two categories:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Resource-state policies<\/strong> that report whether deployed resources meet requirements.<\/li>\n<li><strong>Request-time policies<\/strong> that stop unapproved identities or applications from making certain changes.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Without this separation, executives may see a healthy compliance dashboard and assume identity controls are also being measured. They are not the same thing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Replace informal exceptions with controlled exemptions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Every organisation eventually needs an exception. The dangerous approach is excluding an entire subscription because one application cannot meet a policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use formal Azure Policy exemptions with a named requester, approver, reason, ticket reference and expiry date. Azure supports exemptions for specific resources or parts of a larger policy initiative, allowing the exception to remain narrow.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Review active exemptions monthly. An expired business reason should result in an expired exemption.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A simplified policy example<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The following example shows the basic idea. It denies a change when the calling application is not included in an approved list.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n &quot;if&quot;: {\n &quot;allOf&quot;: [\n {\n &quot;field&quot;: &quot;type&quot;,\n &quot;equals&quot;: &quot;Microsoft.KeyVault\/vaults&quot;\n },\n {\n &quot;value&quot;: &quot;[tryGet(requestContext().identity, &#39;appid&#39;)]&quot;,\n &quot;notIn&quot;: &quot;[parameters(&#39;approvedApplicationIds&#39;)]&quot;\n }\n ]\n },\n &quot;then&quot;: {\n &quot;effect&quot;: &quot;deny&quot;\n }\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">This is an illustrative pattern, not a production-ready policy. Identity claims may be absent in some requests, which is why the safer <code>tryGet<\/code> method is used. The allowed applications, affected operations and emergency-access process must also be tested carefully.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What this looks like in a mid-market business<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 180-person professional services firm with a small internal IT team and an external development partner. Several administrators can change production resources, while two deployment tools and an old integration identity hold broad permissions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rather than removing all administrator flexibility, the firm requires high-risk production changes to come through its approved deployment pipeline. Privileged human access becomes temporary, software identities receive named owners and exceptions expire automatically.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The outcome is not simply a better technical configuration. The business gains a clearer audit trail, fewer opportunities for accidental changes and a smaller window for compromised credentials to cause damage.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How this supports Essential Eight maturity<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Essential Eight is the Australian government\u2019s cybersecurity framework for reducing common cyber risks. Identity-aware policy is particularly relevant to restricting administrative privileges and strengthening multi-factor authentication controls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, an Azure Policy dashboard does not prove Essential Eight or Information Security Manual compliance. Microsoft explicitly notes that Azure Policy mappings provide only a partial view of compliance and may not cover every requirement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Treat these policies as enforceable evidence within a wider governance program. You still need access reviews, incident monitoring, documented procedures, testing and accountable control owners.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical 30-day starting plan<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Identify the ten Azure changes that could create your largest outage, security or privacy incident.<\/li>\n<li>List every human and software identity capable of making those changes.<\/li>\n<li>Remove unused access and move powerful human roles into Privileged Identity Management.<\/li>\n<li>Create one identity-aware policy for a tightly defined production scenario.<\/li>\n<li>Test it in a non-production environment using real portal, pipeline and emergency-access workflows.<\/li>\n<li>Document how denied requests, exemptions and emergency changes will be handled.<\/li>\n<li>Expand only after the first control works without disrupting legitimate delivery.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Govern the request as well as the resource<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure governance can no longer focus only on whether a resource looks compliant after deployment. CIOs also need confidence that sensitive changes are coming from the right person, application or automation process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc combines more than 20 years of enterprise IT experience with practical work across Azure, Microsoft 365, Intune, Microsoft Defender, Wiz, OpenAI and Claude. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, we help organisations build controls that reduce risk without turning cloud governance into another layer of delay.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure which identities can currently change your most sensitive Azure resources, we are happy to help you review the exposure and identify a sensible first control \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Azure Policy can now consider who or what is making a change. Learn how Australian CIOs can use this capability to reduce privileged-access risk without slowing delivery.<\/p>\n","protected":false},"author":1,"featured_media":59632,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[16,19,13,36],"tags":[],"class_list":["post-59630","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-azure","category-azure-security","category-blog","category-entra-id"],"jetpack-related-posts":[{"id":56773,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/why-use-an-azure-landing-zone\/","url_meta":{"origin":59630,"position":0},"title":"Why Use an Azure Landing Zone","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Learn what an Azure Landing Zone is, why it matters, and how to build one that balances speed, security, and cost. Practical steps and examples for technical leaders and engineers.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/11\/why-use-an-azure-landing-zone-for-secure-scalable-cloud-growth.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/11\/why-use-an-azure-landing-zone-for-secure-scalable-cloud-growth.png 1x, \/wp-content\/uploads\/2025\/11\/why-use-an-azure-landing-zone-for-secure-scalable-cloud-growth.png 1.5x, \/wp-content\/uploads\/2025\/11\/why-use-an-azure-landing-zone-for-secure-scalable-cloud-growth.png 2x, \/wp-content\/uploads\/2025\/11\/why-use-an-azure-landing-zone-for-secure-scalable-cloud-growth.png 3x, \/wp-content\/uploads\/2025\/11\/why-use-an-azure-landing-zone-for-secure-scalable-cloud-growth.png 4x"},"classes":[]},{"id":59493,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/02\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting\/","url_meta":{"origin":59630,"position":1},"title":"Azure MCP Server 3.0 GA What IT Leaders Need Before Connecting","author":"CPI Staff","date":"November 2, 2026","format":false,"excerpt":"Azure MCP Server 3.0 makes agents more useful\u2014and potentially more powerful. Here is what IT leaders should check before connecting it to production Azure resources.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/11\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/11\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting.png 1x, \/wp-content\/uploads\/2026\/11\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting.png 1.5x, \/wp-content\/uploads\/2026\/11\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting.png 2x, \/wp-content\/uploads\/2026\/11\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting.png 3x, \/wp-content\/uploads\/2026\/11\/azure-mcp-server-3-0-ga-what-it-leaders-need-before-connecting.png 4x"},"classes":[]},{"id":59471,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/29\/how-route-level-waf-policies-simplify-azure-front-door-security\/","url_meta":{"origin":59630,"position":2},"title":"How Route-Level WAF Policies Simplify Azure Front Door Security","author":"CPI Staff","date":"October 29, 2026","format":false,"excerpt":"Use Azure Front Door route-level WAF policies to maintain a consistent security baseline while applying tighter controls to sensitive sign-in, payment and API traffic.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/how-route-level-waf-policies-simplify-azure-front-door-security.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/how-route-level-waf-policies-simplify-azure-front-door-security.png 1x, \/wp-content\/uploads\/2026\/10\/how-route-level-waf-policies-simplify-azure-front-door-security.png 1.5x, \/wp-content\/uploads\/2026\/10\/how-route-level-waf-policies-simplify-azure-front-door-security.png 2x, \/wp-content\/uploads\/2026\/10\/how-route-level-waf-policies-simplify-azure-front-door-security.png 3x, \/wp-content\/uploads\/2026\/10\/how-route-level-waf-policies-simplify-azure-front-door-security.png 4x"},"classes":[]},{"id":59508,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/02\/azure-blueprints-retirement-what-australian-teams-must-migrate\/","url_meta":{"origin":59630,"position":3},"title":"Azure Blueprints Retirement What Australian Teams Must Migrate","author":"CPI Staff","date":"November 2, 2026","format":false,"excerpt":"Azure Blueprints is in phased retirement. Australian teams should export definitions, replace assignments and locks, and test Deployment Stacks before governance controls disappear in January 2027.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/11\/azure-blueprints-retirement-what-australian-teams-must-migrate.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/11\/azure-blueprints-retirement-what-australian-teams-must-migrate.png 1x, \/wp-content\/uploads\/2026\/11\/azure-blueprints-retirement-what-australian-teams-must-migrate.png 1.5x, \/wp-content\/uploads\/2026\/11\/azure-blueprints-retirement-what-australian-teams-must-migrate.png 2x, \/wp-content\/uploads\/2026\/11\/azure-blueprints-retirement-what-australian-teams-must-migrate.png 3x, \/wp-content\/uploads\/2026\/11\/azure-blueprints-retirement-what-australian-teams-must-migrate.png 4x"},"classes":[]},{"id":59093,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/14\/immutable-azure-sql-backups-for-practical-ransomware-recovery\/","url_meta":{"origin":59630,"position":4},"title":"Immutable Azure SQL Backups for Practical Ransomware Recovery","author":"CPI Staff","date":"October 14, 2026","format":false,"excerpt":"Learn how to design tamper-resistant Azure SQL backups that protect recovery points, support Essential 8 goals and give leaders confidence the business can recover.","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/immutable-azure-sql-backups-for-practical-ransomware-recovery.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/immutable-azure-sql-backups-for-practical-ransomware-recovery.png 1x, \/wp-content\/uploads\/2026\/10\/immutable-azure-sql-backups-for-practical-ransomware-recovery.png 1.5x, \/wp-content\/uploads\/2026\/10\/immutable-azure-sql-backups-for-practical-ransomware-recovery.png 2x, \/wp-content\/uploads\/2026\/10\/immutable-azure-sql-backups-for-practical-ransomware-recovery.png 3x, \/wp-content\/uploads\/2026\/10\/immutable-azure-sql-backups-for-practical-ransomware-recovery.png 4x"},"classes":[]},{"id":57754,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now\/","url_meta":{"origin":59630,"position":5},"title":"Claude on Azure GB300 gives enterprises safer AI agents now","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Claude on Azure GB300 gives Azure-first organisations a new way to run governed AI agents. Here is what it means for cost, control, security, and readiness.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now.png 1x, \/wp-content\/uploads\/2026\/07\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now.png 1.5x, \/wp-content\/uploads\/2026\/07\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now.png 2x, \/wp-content\/uploads\/2026\/07\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now.png 3x, \/wp-content\/uploads\/2026\/07\/claude-on-azure-gb300-gives-enterprises-safer-ai-agents-now.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/11\/why-identity-aware-azure-policy-changes-cloud-governance-in-2026.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59630"}],"version-history":[{"count":2,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59630\/revisions"}],"predecessor-version":[{"id":59633,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59630\/revisions\/59633"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59632"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}