{"id":59682,"date":"2026-11-09T17:02:30","date_gmt":"2026-11-09T07:02:30","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/09\/keyless-microsoft-foundry-model-access-with-entra-id-in-australia\/"},"modified":"2026-11-09T17:04:04","modified_gmt":"2026-11-09T07:04:04","slug":"keyless-microsoft-foundry-model-access-with-entra-id-in-australia","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/11\/09\/keyless-microsoft-foundry-model-access-with-entra-id-in-australia\/","title":{"rendered":"Keyless Microsoft Foundry Model Access with Entra ID in Australia"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post <strong>Keyless Microsoft Foundry Model Access with Entra ID in Australia<\/strong> we will explain how to remove long-lived API keys from model access, replace them with identity-based permissions, and make the change without disrupting production applications.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">Many AI projects begin with an API key copied into an application setting, developer laptop or deployment pipeline. That is convenient for a pilot, but risky in production: anyone who obtains the key may be able to use the model, generate unexpected costs and leave limited evidence of who made each request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Keyless access solves this by requiring every person, application or automated process to prove its identity through Microsoft Entra ID. Access is then granted through defined roles, while short-lived security tokens replace permanent credentials stored in code.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What keyless access actually means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Keyless does not mean authentication-free. It means your applications no longer rely on a shared password-like API key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra ID, which manages identities and access across Microsoft cloud services, verifies the caller. Azure role-based access control, usually shortened to RBAC, then determines what that identity is allowed to do.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, a developer might use their work account while testing locally. An application running in Azure would normally use a managed identity, which is an identity Azure creates and maintains for the application without your team storing a password.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This provides three immediate business benefits:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Lower security risk<\/strong> because there is no permanent model key sitting in source code, scripts or configuration files.<\/li>\n<li><strong>Better accountability<\/strong> because access can be linked to a specific person, application or workload.<\/li>\n<li><strong>Less administration<\/strong> because Azure issues and refreshes access tokens automatically.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This guide builds on our earlier article about how to secure Microsoft Foundry projects with RBAC and managed identity. Here, we focus specifically on model calls, application code and a safe migration away from API keys.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How the technology works behind the scenes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When an application sends a request to a Microsoft Foundry model, it must prove that it is authorised. With key-based access, it sends the same static key with every request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With Entra ID, the process works differently:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The person or application signs in using an approved Entra ID identity.<\/li>\n<li>Entra ID issues a short-lived access token for Microsoft Foundry.<\/li>\n<li>The application sends that token to the Foundry endpoint.<\/li>\n<li>Azure checks the identity&#8217;s assigned role and the scope of that role.<\/li>\n<li>The model request is accepted or rejected based on those permissions.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The token expires automatically. The Azure Identity software library obtains a new one when required, so developers do not need to build their own token renewal process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is also important to separate management access from model usage. Someone who can deploy or delete Azure resources does not automatically need permission to submit prompts, and an application calling a model should not normally be able to change the Foundry environment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical rollout approach<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Identify every current consumer<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Start by finding where the existing API key is used. Check application settings, Azure DevOps or GitHub pipelines, local environment files, automation scripts, test tools and third-party integrations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This discovery step matters because disabling keys too early can stop an overlooked reporting process or internal application. It also often reveals old credentials that should have been removed months ago.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Give each workload its own identity<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Applications running in Azure App Service, Azure Functions, virtual machines or other supported Azure services should generally use a managed identity. Azure maintains its underlying credentials, and the identity can be removed when the application is retired.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For local development, staff can use their individual Entra ID accounts. For systems outside Azure, consider workload identity federation, which establishes trust without storing a client secret, where the hosting platform supports it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Avoid sharing one identity across every application. Separate identities make it easier to remove access, investigate unusual activity and understand which system is generating model costs.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Assign only the required role<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For direct Microsoft Foundry model inference, the identity typically requires the <strong>Cognitive Services User<\/strong> role on the relevant Foundry resource. This role allows the identity to call the model without giving it broad resource administration rights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the application also uses Foundry project APIs or agents, additional Foundry roles may be required. Assign them at the narrowest practical scope rather than at the whole subscription level.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where possible, manage human access through Entra ID security groups rather than assigning roles person by person. This reduces administration when staff join, change roles or leave the business.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Update the application code<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The following simplified Python example uses the Azure Identity library to obtain tokens automatically. The same approach can work locally with a developer account and in Azure with a managed identity.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pip install --upgrade openai azure-identity<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>from azure.identity import DefaultAzureCredential, get_bearer_token_provider\nfrom openai import OpenAI\n\nproject_endpoint = &quot;https:\/\/your-resource.services.ai.azure.com\/api\/projects\/your-project&quot;\n\ntoken_provider = get_bearer_token_provider(\n DefaultAzureCredential(),\n &quot;https:\/\/ai.azure.com\/.default&quot;\n)\n\nclient = OpenAI(\n base_url=f&quot;{project_endpoint}\/openai\/v1&quot;,\n api_key=token_provider\n)\n\nresponse = client.responses.create(\n model=&quot;your-deployment-name&quot;,\n input=&quot;Summarise the key business risks in this document.&quot;\n)\n\nprint(response.output_text)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>DefaultAzureCredential<\/code> checks the environment and selects an appropriate identity. On a developer workstation, it can use the person&#8217;s Azure sign-in. In an Azure-hosted production application, it can use the application&#8217;s managed identity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use the exact project endpoint and model deployment name from your Foundry environment. Endpoints differ between project APIs, Azure OpenAI-compatible APIs and provider-specific SDKs, so copying an endpoint from another project can lead to confusing authentication errors.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Test before disabling keys<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Test keyless access in a non-production environment first. Confirm successful model requests, expected denials for unauthorised identities, application logging, failure handling and deployment pipeline behaviour.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once every known consumer has moved to Entra ID, disable local authentication on the Foundry resource. In infrastructure-as-code templates, this is controlled through the <code>disableLocalAuth<\/code> property:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>properties: {\n disableLocalAuth: true\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">You can also enforce this through Azure Policy so new AI resources cannot quietly reintroduce key-based access. Allow for propagation time and verify that an old key returns an authentication failure before considering the migration complete.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Common mistakes that weaken keyless access<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Leaving API keys enabled indefinitely.<\/strong> Changing the code is not enough if an old key can still be used.<\/li>\n<li><strong>Giving applications Owner or Contributor access.<\/strong> Model inference rarely requires permission to manage the entire Azure resource.<\/li>\n<li><strong>Using one managed identity everywhere.<\/strong> This makes investigations and access removal unnecessarily difficult.<\/li>\n<li><strong>Ignoring human identity controls.<\/strong> Developer accounts still need multifactor authentication, sensible administrator permissions and regular access reviews. Our guide to Microsoft Entra ID security settings covers these controls in more detail.<\/li>\n<li><strong>Assuming identity controls replace network security.<\/strong> Entra ID controls who can connect, while private networking controls where connections can come from. Sensitive environments may need both, as explained in our article on private network access for Microsoft Foundry.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Why this matters for Australian organisations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Keyless access does not automatically make an organisation compliant. However, it supports stronger access control, individual accountability and reduced reliance on shared credentials.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These are useful foundations when working toward the Essential 8, the Australian government&#8217;s cybersecurity framework that many organisations use to reduce common attack paths. They can also improve the evidence available during customer reviews, cyber insurance assessments and security audits.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 180-person professional services firm running several internal AI tools. If every tool uses the same API key, the business cannot easily tell which application generated a cost spike or safely remove one tool&#8217;s access without affecting the others.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Giving each application its own managed identity changes that. Access can be removed from one system, model activity can be traced more clearly, and there are no permanent model keys for staff to copy into an unapproved tool.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A short checklist for technology leaders<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Inventory every application, pipeline and person using Foundry model keys.<\/li>\n<li>Create separate managed identities for production workloads.<\/li>\n<li>Assign the minimum role at the narrowest practical scope.<\/li>\n<li>Update applications to request Entra ID tokens automatically.<\/li>\n<li>Test successful access and expected failures.<\/li>\n<li>Disable local authentication and verify old keys no longer work.<\/li>\n<li>Monitor identities, model usage, costs and role changes.<\/li>\n<li>Review the design whenever a new model, agent or data source is added.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Moving to keyless Microsoft Foundry access is not a large AI redesign. It is a focused security improvement that reduces credential risk, strengthens accountability and makes AI access easier to manage as usage grows.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc is a Melbourne-based Microsoft Partner and Wiz Security Integrator with more than 20 years of enterprise IT experience. If you are unsure where Foundry keys are stored, which roles your applications need or whether disabling them will break production, we are happy to review the setup with you \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Replace long-lived AI API keys with Entra ID identities, short-lived tokens and controlled permissions for safer Microsoft Foundry model access across Australian organisations.<\/p>\n","protected":false},"author":1,"featured_media":59684,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[112,41,13,36],"tags":[],"class_list":["post-59682","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure-foundry","category-azure-managed-identity","category-blog","category-entra-id"],"jetpack-related-posts":[{"id":58056,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry\/","url_meta":{"origin":59682,"position":0},"title":"How to Run Claude Agent SDK Solutions Securely on Microsoft Foundry","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Learn how Microsoft Foundry can provide the identity, hosting and governance needed to turn Claude Agent SDK prototypes into controlled business solutions.","rel":"","context":"In &quot;AI Governance &amp; Risk Management&quot;","block_context":{"text":"AI Governance &amp; Risk Management","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-governance-risk-management\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry.png 1x, \/wp-content\/uploads\/2026\/07\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry.png 1.5x, \/wp-content\/uploads\/2026\/07\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry.png 2x, \/wp-content\/uploads\/2026\/07\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry.png 3x, \/wp-content\/uploads\/2026\/07\/how-to-run-claude-agent-sdk-solutions-securely-on-microsoft-foundry.png 4x"},"classes":[]},{"id":57836,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service\/","url_meta":{"origin":59682,"position":1},"title":"Implementing Secure A2A Auth in Microsoft Foundry Agent Service","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents are starting to call other agents. Here is how to implement A2A authentication in Microsoft Foundry Agent Service without creating a security blind spot.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service.png 1x, \/wp-content\/uploads\/2026\/07\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service.png 1.5x, \/wp-content\/uploads\/2026\/07\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service.png 2x, \/wp-content\/uploads\/2026\/07\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service.png 3x, \/wp-content\/uploads\/2026\/07\/implementing-secure-a2a-auth-in-microsoft-foundry-agent-service.png 4x"},"classes":[]},{"id":57984,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity\/","url_meta":{"origin":59682,"position":2},"title":"Secure Microsoft Foundry Projects with RBAC and Managed Identity","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Learn how to control Microsoft Foundry access, remove stored credentials and give each AI project only the permissions it genuinely needs.","rel":"","context":"In &quot;Azure Managed-Identity&quot;","block_context":{"text":"Azure Managed-Identity","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/azure-managed-identity\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity.png 1x, \/wp-content\/uploads\/2026\/07\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity.png 1.5x, \/wp-content\/uploads\/2026\/07\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity.png 2x, \/wp-content\/uploads\/2026\/07\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity.png 3x, \/wp-content\/uploads\/2026\/07\/secure-microsoft-foundry-projects-with-rbac-and-managed-identity.png 4x"},"classes":[]},{"id":57803,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/securing-a2a-agent-communication-using-microsoft-entra-id\/","url_meta":{"origin":59682,"position":3},"title":"Securing A2A Agent Communication Using Microsoft Entra ID","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents are starting to talk to each other. Here\u2019s how Microsoft Entra ID helps keep those conversations trusted, controlled, and audit-ready.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 1x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 1.5x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 2x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 3x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 4x"},"classes":[]},{"id":59164,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/17\/identity-at-every-hop-with-entra-agent-id-and-managed-identity\/","url_meta":{"origin":59682,"position":4},"title":"Identity at Every Hop with Entra Agent ID and Managed Identity","author":"CPI Staff","date":"October 17, 2026","format":false,"excerpt":"AI agents often cross several systems to complete one task. Learn how identity at every hop limits access, removes shared secrets and creates a reliable audit trail.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 1x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 1.5x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 2x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 3x, \/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png 4x"},"classes":[]},{"id":59099,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/14\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry\/","url_meta":{"origin":59682,"position":5},"title":"The Identity at Every Hop Blueprint for Teams Copilot and Foundry","author":"CPI Staff","date":"October 14, 2026","format":false,"excerpt":"Learn how to protect AI agents across Teams, Copilot and Microsoft Foundry by checking identity, permissions and accountability at every step.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 1x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 1.5x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 2x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 3x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/11\/keyless-microsoft-foundry-model-access-with-entra-id-in-australia.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59682","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59682"}],"version-history":[{"count":2,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59682\/revisions"}],"predecessor-version":[{"id":59685,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59682\/revisions\/59685"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59684"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59682"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59682"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59682"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}