{"id":3589,"date":"2023-04-12T15:39:33","date_gmt":"2023-04-12T15:39:33","guid":{"rendered":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/"},"modified":"2026-01-15T18:14:25","modified_gmt":"2026-01-15T18:14:25","slug":"azure-key-vaults-and-sql-encryption","status":"publish","type":"post","link":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/","title":{"rendered":"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data?"},"content":{"rendered":"

I started a \u201cfew posts ago\u201d exploring the topic of SQL Server encryption, beginning with Symmetric Encryption<\/a> and then looking at the \u201cAlways Encrypted\u201d feature. In the second post, I configured Always Encrypted on a column in a SQL table and stored the encryption key in the Windows certificate store<\/a> on the client machine.<\/p>\n

In this post, I use the other<\/em> option (for storing encryption keys) which is to utilize an Azure Key Vault<\/a>. Using this approach creates a much more scalable solution (and was more fun to implement!)<\/p>\n

As I started in the earlier posts, A<\/strong>lways Encrypted<\/strong> is an approach that ensures that sensitive data never appears as plaintext inside the database system. After configured, only client applications that have access to specific encryption keys can access the data as plaintext. This means that if the database is accessed by someone that doesn\u2019t have the encryption key (even if they have system administrator privileges), they won\u2019t be able to access that data!<\/p>\n

In this post I will walk through the basics of implementing Always Encrypted on a SQL table, store the encryption key in an Azure Key Vault and then use a client application to work with the encrypted data.<\/p>\n

\"\"<\/p>\n

The above image depicts the concept at a very high-level. It shows an Azure AD registered application <\/strong>retrieving an encryption key<\/strong> from an Azure Key Vault<\/strong> and then using that encryption key to programmatically\u00a0\u201csign in\u201d and work with Always Encrypted data residing in an Azure SQL database<\/strong> living in the cloud.<\/p>\n

Applications<\/strong><\/p>\n

For this to work, you need to \u201cenable\u201d a client application to access the database by setting up an Azure Active Directory (Azure AD) application<\/strong>. This provides\u00a0a \u201cdigital identity\u201d (along with and some associated configurations) which informs Azure AD\u00a0as to what kind of access the application which uses that digital identity will be granted (and other things). The Azure application will have an Application ID<\/em>\u00a0and\u00a0key<\/em>\u00a0that ultimately the client<\/em> application will use to authenticate itself. You can use the Azure Portal to easily create an Azure registered application<\/a> and assign it the required Azure role<\/a>. For this example I created the \u201cjim-app\u201d and\u00a0 assigned the Contributor<\/strong> role<\/strong> to it at the subscription level (for detailed steps, you can see\u00a0Assigning Azure roles using the Azure portal<\/a>).<\/p>\n

\"\"<\/p>\n

Once you have an Azure Active Directory (Azure AD) application created and have assigned a role to it, you need to register it which creates an application ID and authentication key<\/a>. This step also must include creating an application secret<\/strong> which will be the password that the client application will use to access the Azure key vault.<\/p>\n

Azure Key Vault<\/strong><\/p>\n

After the Azure Active Directory (Azure AD) application has been created and configured and you have your application ID and secret, it’s time to create an Azure<\/strong> key vault<\/strong> and configure its access policy<\/u> so a client application can access the vault’s secrets.<\/p>\n

An Azure Key Vault is\u00a0a cloud service for securely storing and accessing secrets<\/strong>. A secret is anything that you want to tightly control access to (such as API keys, passwords, certificates, or cryptographic keys like the one we created in the last step).<\/p>\n

You can use the Azure portal to create a key vault<\/a>. Once you have it set up, you need configure its access policy<\/strong> so that the application can access the vault’s secrets. The\u00a0create<\/em>,\u00a0get<\/em>,\u00a0list<\/em>,\u00a0sign<\/em>,\u00a0verify<\/em>,\u00a0wrapKey<\/em>, and\u00a0unwrapKey<\/em>\u00a0are the minimal permissions<\/u> required for this exercise (creating a new column master key and for setting up encryption with SQL Server Management Studio).<\/p>\n

I\u2019ve created an Azure Key Vault named \u201cjohndenverkeyvault\u201d and added an access policy granting the appropriate access to my jim-app:<\/p>\n

The Database<\/strong><\/p>\n

Since I wanted to utilize an Azure Key Vault to store my encryption keys, why not use an Azure SQL database<\/a>? Azure SQL Database is based on the latest stable version of the\u00a0Microsoft SQL Server database engine<\/a> and is a snap to set up a server for testing. I won\u2019t spend time here on the setup, but you can read about that here<\/a>.<\/p>\n

Once my database (the \u201cjamesmillerdatabse\u201d) was set up, I used SQL Server Management Studio (SSMS) to connect to it and create an empty table (patients2) for testing this solution. The table is based upon one of the many helpful examples provided by Microsoft and includes a column that is considered to be sensitive in nature:<\/p>\n

[SSN] [char](11) NOT NULL<\/p>\n

Once the table is created, its time to implement Always Encrypted (again using SSMS and the Always Encrypted wizard). I covered this in my last post (and there are plenty of examples in the product documentation), so I will skip over this step but will point out that there is one key difference and that is in the Master Key Configuration<\/strong> step \u2013 that is where you will select Azure Key Vault<\/strong> rather than the Windows certificate store<\/strong>:<\/p>\n

\"\"<\/p>\n

When you select \u201cAzure Key Vault\u201d, you\u2019ll be asked to sign into your Azure account and select the Azure Key Vault that will house your encryption keys.<\/p>\n

Now that we have an empty table (with Always Encrypted implemented) if we try to insert a row into the table using a SQL Insert query, we\u2019ll not be successful:<\/p>\n

\"\"<\/p>\n

<\/h2>\n

<\/h2>\n

<\/h2>\n

The Client Application<\/h2>\n

Since this is just an example, with the objective of illustrating how a client application can interface with a cloud-based Azure SQL database using an encryption key retrieved from an Azure Key Vault, I used a simple C# sample application available on GitHub. I selected this sample application because it performs a set of hard-coded SQL inserts and selects on Always Encrypted columns, and it also implements a number of APIs that make accessing Azure Key Vaults straight-forward. Finally, applications need to use SqlParameter objects to pass plaintext data to a server with Always Encrypted columns as this sample application does.<\/p>\n

To set up the sample application I followed the following steps:<\/p>\n

    \n
  1. Open MS Visual Studio and create a new C#\u00a0Console App (.NET Framework)<\/strong>and make sure the project is set to\u00a0.NET Framework 4.7<\/a>\u00a0or later.<\/li>\n
  2. Name the project\u00a0AlwaysEncryptedConsoleAKVApp<\/strong>and click\u00a0OK<\/strong>.<\/li>\n<\/ol>\n

    \"\"<\/p>\n

    3. Install the following NuGet packages by selecting to Tools<\/strong>, then\u00a0NuGet Package Manager<\/strong>and then\u00a0Package Manager Console<\/strong> and then running the following commands:<\/p>\n

    Install-Package Microsoft.SqlServer.Management.AlwaysEncrypted.AzureKeyVaultProvider<\/p>\n

    Install-Package Microsoft.IdentityModel.Clients.ActiveDirectory<\/p>\n

    Assuming the following commands executed successfully, the next step is to replace the contents of\u00a0Program.cs<\/em>\u00a0with the downloaded application source code (the sample application source code is also available to simply copy and paste from here<\/a>).<\/p>\n

    Configuring the Sample Application<\/strong><\/p>\n

    Before you can run the app, you need to make 3 changes. First, you need to replace the value of the string for the global connectionString variable, then set the applicationID value and the clientkey (application secret) values with those that we created in the Azure portal earlier. These three updates are the three lines of code that directly precede the Main method in the code:<\/p>\n

    \"\"<\/p>\n

    Once you\u2019ve made the changes, save the project, build the executable and then click Run!<\/p>\n

    Results<\/strong><\/p>\n

    This application is a MS Windows console application so you will see the results in a command-line window as show below.\u00a0 The application echoes connection information, asks for the password and then retrieves the encryption key from the Azure Key Vault. Once authenticated, it clears any existing rows in the SQL table, performs a number of row inserts and then queries the table showing the results.<\/p>\n

    \"\"<\/p>\n

    If you are curious, you should take some time to look through the sample application code. The most interesting sections include the section that handles the authentication, where the DELETE SQL command is executed as well as where the row inserts, SQL SELECT all and SELECT WHERE are performed. These lines of code are \u201cripe\u201d for leveraging in other solutions.<\/p>\n

    A Final Step<\/strong><\/p>\n

    To conclude this exercise, I verified that the data on the server<\/u> is<\/em> encrypted<\/u> by querying the Patients2 table with a simple SELECT command using SSMS. The results show that the patients SSN information is displayed as ciphertext (encrypted) values:<\/p>\n

    \"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

    I started a \u201cfew posts ago\u201d exploring the topic of SQL Server encryption, beginning with Symmetric Encryption and then looking at the \u201cAlways Encrypted\u201d feature. In the second post, I configured Always Encrypted on a column in a SQL table and stored the encryption key in the Windows certificate store on the client machine. In…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[32],"class_list":["post-3589","post","type-post","status-publish","format-standard","hentry","category-quebit-value","tag-sql"],"acf":[],"yoast_head":"\nHow Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data? - QueBIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data? - QueBIT\" \/>\n<meta property=\"og:description\" content=\"I started a \u201cfew posts ago\u201d exploring the topic of SQL Server encryption, beginning with Symmetric Encryption and then looking at the \u201cAlways Encrypted\u201d feature. In the second post, I configured Always Encrypted on a column in a SQL table and stored the encryption key in the Windows certificate store on the client machine. In…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/\" \/>\n<meta property=\"og:site_name\" content=\"QueBIT\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-12T15:39:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-15T18:14:25+00:00\" \/>\n<meta name=\"author\" content=\"agoddard\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"agoddard\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/\"},\"author\":{\"name\":\"agoddard\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/#\\\/schema\\\/person\\\/e52d72da0fd2f5f70d189343fe4f5084\"},\"headline\":\"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data?\",\"datePublished\":\"2023-04-12T15:39:33+00:00\",\"dateModified\":\"2026-01-15T18:14:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/\"},\"wordCount\":1375,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AZ1-min.jpg\",\"keywords\":[\"SQL\"],\"articleSection\":[\"QueBIT Value\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/\",\"url\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/\",\"name\":\"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data? - QueBIT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AZ1-min.jpg\",\"datePublished\":\"2023-04-12T15:39:33+00:00\",\"dateModified\":\"2026-01-15T18:14:25+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/#\\\/schema\\\/person\\\/e52d72da0fd2f5f70d189343fe4f5084\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#primaryimage\",\"url\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AZ1-min.jpg\",\"contentUrl\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/AZ1-min.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/azure-key-vaults-and-sql-encryption\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/#website\",\"url\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/\",\"name\":\"QueBIT\",\"description\":\"QueBIT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/#\\\/schema\\\/person\\\/e52d72da0fd2f5f70d189343fe4f5084\",\"name\":\"agoddard\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d817b364cff1d66116debde8d1c85e5e76eeece9c5ae731b19276a6040231455?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d817b364cff1d66116debde8d1c85e5e76eeece9c5ae731b19276a6040231455?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d817b364cff1d66116debde8d1c85e5e76eeece9c5ae731b19276a6040231455?s=96&d=mm&r=g\",\"caption\":\"agoddard\"},\"sameAs\":[\"https:\\\/\\\/quebit.com\\\/askquebit\"],\"url\":\"https:\\\/\\\/quebit.com\\\/askquebit\\\/author\\\/agoddard\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data? - QueBIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/","og_locale":"en_US","og_type":"article","og_title":"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data? - QueBIT","og_description":"I started a \u201cfew posts ago\u201d exploring the topic of SQL Server encryption, beginning with Symmetric Encryption and then looking at the \u201cAlways Encrypted\u201d feature. In the second post, I configured Always Encrypted on a column in a SQL table and stored the encryption key in the Windows certificate store on the client machine. In…","og_url":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/","og_site_name":"QueBIT","article_published_time":"2023-04-12T15:39:33+00:00","article_modified_time":"2026-01-15T18:14:25+00:00","author":"agoddard","twitter_card":"summary_large_image","twitter_misc":{"Written by":"agoddard","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#article","isPartOf":{"@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/"},"author":{"name":"agoddard","@id":"https:\/\/quebit.com\/askquebit\/#\/schema\/person\/e52d72da0fd2f5f70d189343fe4f5084"},"headline":"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data?","datePublished":"2023-04-12T15:39:33+00:00","dateModified":"2026-01-15T18:14:25+00:00","mainEntityOfPage":{"@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/"},"wordCount":1375,"commentCount":0,"image":{"@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#primaryimage"},"thumbnailUrl":"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2022\/01\/AZ1-min.jpg","keywords":["SQL"],"articleSection":["QueBIT Value"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/","url":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/","name":"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data? - QueBIT","isPartOf":{"@id":"https:\/\/quebit.com\/askquebit\/#website"},"primaryImageOfPage":{"@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#primaryimage"},"image":{"@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#primaryimage"},"thumbnailUrl":"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2022\/01\/AZ1-min.jpg","datePublished":"2023-04-12T15:39:33+00:00","dateModified":"2026-01-15T18:14:25+00:00","author":{"@id":"https:\/\/quebit.com\/askquebit\/#\/schema\/person\/e52d72da0fd2f5f70d189343fe4f5084"},"breadcrumb":{"@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#primaryimage","url":"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2022\/01\/AZ1-min.jpg","contentUrl":"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2022\/01\/AZ1-min.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/quebit.com\/askquebit\/azure-key-vaults-and-sql-encryption\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/quebit.com\/askquebit\/"},{"@type":"ListItem","position":2,"name":"How Do I Use Azure Key Vault to Secure SQL Server Encryption Keys and Protect My Data?"}]},{"@type":"WebSite","@id":"https:\/\/quebit.com\/askquebit\/#website","url":"https:\/\/quebit.com\/askquebit\/","name":"QueBIT","description":"QueBIT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/quebit.com\/askquebit\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/quebit.com\/askquebit\/#\/schema\/person\/e52d72da0fd2f5f70d189343fe4f5084","name":"agoddard","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d817b364cff1d66116debde8d1c85e5e76eeece9c5ae731b19276a6040231455?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d817b364cff1d66116debde8d1c85e5e76eeece9c5ae731b19276a6040231455?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d817b364cff1d66116debde8d1c85e5e76eeece9c5ae731b19276a6040231455?s=96&d=mm&r=g","caption":"agoddard"},"sameAs":["https:\/\/quebit.com\/askquebit"],"url":"https:\/\/quebit.com\/askquebit\/author\/agoddard\/"}]}},"_links":{"self":[{"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/posts\/3589","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/comments?post=3589"}],"version-history":[{"count":1,"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/posts\/3589\/revisions"}],"predecessor-version":[{"id":4915,"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/posts\/3589\/revisions\/4915"}],"wp:attachment":[{"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/media?parent=3589"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/categories?post=3589"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quebit.com\/askquebit\/wp-json\/wp\/v2\/tags?post=3589"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}