{"id":2656,"date":"2020-03-23T09:59:59","date_gmt":"2020-03-23T08:59:59","guid":{"rendered":"https:\/\/geko2.factoryfy.com\/securing-jenkins-access-to-aws-part-ii\/"},"modified":"2021-11-03T17:44:53","modified_gmt":"2021-11-03T16:44:53","slug":"jenkins-access-aws-2","status":"publish","type":"post","link":"https:\/\/geko.cloud\/en\/jenkins-access-aws-2\/","title":{"rendered":"Securing Jenkins access to AWS (part II)"},"content":{"rendered":"<h2>Recommended setup<\/h2>\n<p>If you followed the steps in my <a href=\"https:\/\/geko.cloud\/en\/securing-jenkins-access-to-aws-part-i\/\">previous post<\/a>, you have:<\/p>\n<ul>\n<li>IAM users than can <strong>only<\/strong> assume a role<\/li>\n<li>AWS access keys for those users stored in Jenkins (using <a href=\"https:\/\/plugins.jenkins.io\/aws-credentials\/\">AWS Credentials<\/a> plugin)<\/li>\n<li>An <strong>MFA<\/strong> device assigned to each user<\/li>\n<li>A condition that forces <strong>MFA<\/strong> when assuming roles<\/li>\n<\/ul>\n<h2>Example pipeline<\/h2>\n<p>With all this, we can now run a pipeline that takes advantage of this settings. Something like:<\/p>\n<div class=\"wp-block-codemirror-blocks code-block\">\n<pre class=\"CodeMirror\" data-setting=\"{\">def getAWSUser() {\r\n  wrap([$class: \"BuildUser\"]) {\r\n    return env.BUILD_USER_ID\r\n  }\r\n}\r\n\r\ndef getCredentialsId() {\r\n  wrap([$class: \"BuildUser\"]) {\r\n    return env.BUILD_USER_ID\r\n  }\r\n}\r\n\r\ndef assumeRole(String credentials, String userName,\r\n  String accountId = \"YOUR_AWS_ACCOUNT_ID\", String role = \"role_to_be_assumed\") {\r\n  def String trustedAccount = \"YOUR_AWS_ACCOUNT_ID\"\r\n\r\n  def mfa = input(\r\n    message: \"Enter MFA Token\",\r\n    parameters: [[$class: 'StringParameterDefinition', name: 'mfa', trim: true]]\r\n  )\r\n\r\n  withCredentials([[\r\n    $class: 'AmazonWebServicesCredentialsBinding',\r\n    credentialsId: \"${credentials}\",\r\n    accessKeyVariable: 'AWS_ACCESS_KEY_ID',\r\n    secretKeyVariable: 'AWS_SECRET_ACCESS_KEY'\r\n  ]]) {\r\n    return sh(script: \"\"\"\r\n      aws sts assume-role \\\r\n        --role-arn arn:aws:iam::${accountId}:role\/${role} \\\r\n        --serial-number arn:aws:iam::${trustedAccount}:mfa\/${userName} \\\r\n        --query 'Credentials' \\\r\n        --token-code ${mfa} \\\r\n        --role-session-name ${userName}\r\n    \"\"\", returnStdout: true)\r\n  }\r\n}\r\n\r\npipeline {\r\n  agent any\r\n\r\n  stages {\r\n    stage('Setup') {\r\n      steps {\r\n        script {\r\n          AWSUser = getAWSUser()\r\n          credentialsId = getCredentialsId()\r\n        }\r\n      }\r\n    }\r\n\r\n    stage('Get credentials') {\r\n      steps {\r\n        script {\r\n          jsonCreds = assumeRole(\"${credentialsId}\", \"${AWSUser}\")\r\n          creds = readJSON text: \"${jsonCreds}\"\r\n        }\r\n      }\r\n    }\r\n\r\n    stage('Use credentials') {\r\n      steps {\r\n        withEnv([\r\n            \"AWS_ACCESS_KEY_ID=${creds.AccessKeyId}\",\r\n            \"AWS_SECRET_ACCESS_KEY=${creds.SecretAccessKey}\",\r\n            \"AWS_SESSION_TOKEN=${creds.SessionToken}\"\r\n          ]) {\r\n            sh \"\"\"\r\n              aws sts get-caller-identity\r\n            \"\"\"\r\n        }\r\n      }\r\n    }\r\n  }\r\n}\r\n<\/pre>\n<\/div>\n<p>When running the pipeline, Jenkins will ask you to enter your MFA code in order to assume the desired role:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1538 aligncenter\" src=\"https:\/\/geko2.factoryfy.com\/wp-content\/uploads\/jenkins-pipeline-get-credentials.png\" alt=\"\" width=\"808\" height=\"582\" \/><\/p>\n<p>And after that, use those credentials to perform whatever AWS-related stuff:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1540 aligncenter\" src=\"https:\/\/geko2.factoryfy.com\/wp-content\/uploads\/jenkins-pipeline-use-credentials1.png\" alt=\"\" width=\"775\" height=\"437\" \/><\/p>\n<h2>Key points<\/h2>\n<ul>\n<li>If you followed my advice, your IAM user name and credentials ID will be the same as your Jenkins user name. Otherwise, you&#8217;ll have to modify <em>getAWSUser<\/em> and\/or <em>getCredentialsId<\/em> functions accordingly.<\/li>\n<li>This example assumes a privileged role in the same account as the IAM user, but the setup can be used to assume a role in another account. Just pass the destination account ID as a parameter to the <em>assumeRole<\/em> function call.<\/li>\n<\/ul>\n<hr \/>\n<p>I hope you&#8217;ve enjoyed this post and I encourage you to <a href=\"https:\/\/geko.cloud\/en\/blog\/\">check our blog for other posts<\/a> that you might find helpful, such as &#8220;<a href=\"https:\/\/geko.cloud\/en\/what-is-the-cloud\/\">What is the cloud?<\/a>&#8220;. <a href=\"https:\/\/geko.cloud\/en\/contact\/\">Do not hesitate to contact us<\/a> if you would like us to help you on your projects.<\/p>\n<p>See you on the next post!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recommended setup If you followed the steps in my previous post, you have: IAM users than can only assume a role AWS access keys for those users stored in Jenkins (using AWS Credentials plugin) An MFA device assigned to each user A condition that forces MFA when assuming roles Example pipeline With all this, we [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":2323,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[67],"tags":[72,83],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Securing Jenkins access to AWS (part II)<\/title>\n<meta name=\"description\" content=\"If your Jenkins and AWS configuration follows our recommendations, you can easily secure your pipelines with MFA.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Securing Jenkins access to AWS (part II)\" \/>\n<meta property=\"og:description\" content=\"If your Jenkins and AWS configuration follows our recommendations, you can easily secure your pipelines with MFA.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\" \/>\n<meta property=\"og:site_name\" content=\"Geko Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-23T08:59:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-11-03T16:44:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Pujadas\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@geko_cloud\" \/>\n<meta name=\"twitter:site\" content=\"@geko_cloud\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\"},\"author\":{\"name\":\"David Pujadas\",\"@id\":\"https:\/\/geko.cloud\/es\/#\/schema\/person\/e6acdb23fdedb5aadaee9a561e8f5f9e\"},\"headline\":\"Securing Jenkins access to AWS (part II)\",\"datePublished\":\"2020-03-23T08:59:59+00:00\",\"dateModified\":\"2021-11-03T16:44:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\"},\"wordCount\":232,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\/\/geko.cloud\/es\/#organization\"},\"image\":{\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png\",\"keywords\":[\"AWS\",\"Jenkins\"],\"articleSection\":[\"Labs\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\",\"url\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\",\"name\":\"Securing Jenkins access to AWS (part II)\",\"isPartOf\":{\"@id\":\"https:\/\/geko.cloud\/es\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png\",\"datePublished\":\"2020-03-23T08:59:59+00:00\",\"dateModified\":\"2021-11-03T16:44:53+00:00\",\"description\":\"If your Jenkins and AWS configuration follows our recommendations, you can easily secure your pipelines with MFA.\",\"breadcrumb\":{\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage\",\"url\":\"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png\",\"contentUrl\":\"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png\",\"width\":800,\"height\":300,\"caption\":\"jenkins\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/geko.cloud\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Securing Jenkins access to AWS (part II)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/geko.cloud\/es\/#website\",\"url\":\"https:\/\/geko.cloud\/es\/\",\"name\":\"Geko Cloud\",\"description\":\"Servicios de consultor\u00eda cloud y devops\",\"publisher\":{\"@id\":\"https:\/\/geko.cloud\/es\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/geko.cloud\/es\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/geko.cloud\/es\/#organization\",\"name\":\"Geko Cloud\",\"url\":\"https:\/\/geko.cloud\/es\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/geko.cloud\/es\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/geko.cloud\/wp-content\/uploads\/2021\/10\/geko_logo-positivo.png\",\"contentUrl\":\"https:\/\/geko.cloud\/wp-content\/uploads\/2021\/10\/geko_logo-positivo.png\",\"width\":1650,\"height\":809,\"caption\":\"Geko Cloud\"},\"image\":{\"@id\":\"https:\/\/geko.cloud\/es\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/geko_cloud\",\"https:\/\/www.instagram.com\/gekocloud\/\",\"https:\/\/www.linkedin.com\/company\/gekocloud\",\"https:\/\/www.youtube.com\/channel\/UC5EFLCqUM7fEaXSa_0nWowQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/geko.cloud\/es\/#\/schema\/person\/e6acdb23fdedb5aadaee9a561e8f5f9e\",\"name\":\"David Pujadas\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/geko.cloud\/es\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4757311410445249aa2aafa6278d9855?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4757311410445249aa2aafa6278d9855?s=96&d=mm&r=g\",\"caption\":\"David Pujadas\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Securing Jenkins access to AWS (part II)","description":"If your Jenkins and AWS configuration follows our recommendations, you can easily secure your pipelines with MFA.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/","og_locale":"en_US","og_type":"article","og_title":"Securing Jenkins access to AWS (part II)","og_description":"If your Jenkins and AWS configuration follows our recommendations, you can easily secure your pipelines with MFA.","og_url":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/","og_site_name":"Geko Cloud","article_published_time":"2020-03-23T08:59:59+00:00","article_modified_time":"2021-11-03T16:44:53+00:00","og_image":[{"width":800,"height":300,"url":"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png","type":"image\/png"}],"author":"David Pujadas","twitter_card":"summary_large_image","twitter_creator":"@geko_cloud","twitter_site":"@geko_cloud","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#article","isPartOf":{"@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/"},"author":{"name":"David Pujadas","@id":"https:\/\/geko.cloud\/es\/#\/schema\/person\/e6acdb23fdedb5aadaee9a561e8f5f9e"},"headline":"Securing Jenkins access to AWS (part II)","datePublished":"2020-03-23T08:59:59+00:00","dateModified":"2021-11-03T16:44:53+00:00","mainEntityOfPage":{"@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/"},"wordCount":232,"commentCount":3,"publisher":{"@id":"https:\/\/geko.cloud\/es\/#organization"},"image":{"@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage"},"thumbnailUrl":"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png","keywords":["AWS","Jenkins"],"articleSection":["Labs"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/","url":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/","name":"Securing Jenkins access to AWS (part II)","isPartOf":{"@id":"https:\/\/geko.cloud\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage"},"image":{"@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage"},"thumbnailUrl":"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png","datePublished":"2020-03-23T08:59:59+00:00","dateModified":"2021-11-03T16:44:53+00:00","description":"If your Jenkins and AWS configuration follows our recommendations, you can easily secure your pipelines with MFA.","breadcrumb":{"@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#primaryimage","url":"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png","contentUrl":"https:\/\/geko.cloud\/wp-content\/uploads\/jenkins-aws-mfa.png","width":800,"height":300,"caption":"jenkins"},{"@type":"BreadcrumbList","@id":"https:\/\/geko.cloud\/es\/asegura-el-acceso-de-jenkins-a-aws-parte-ii\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/geko.cloud\/en\/"},{"@type":"ListItem","position":2,"name":"Securing Jenkins access to AWS (part II)"}]},{"@type":"WebSite","@id":"https:\/\/geko.cloud\/es\/#website","url":"https:\/\/geko.cloud\/es\/","name":"Geko Cloud","description":"Servicios de consultor\u00eda cloud y devops","publisher":{"@id":"https:\/\/geko.cloud\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/geko.cloud\/es\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/geko.cloud\/es\/#organization","name":"Geko Cloud","url":"https:\/\/geko.cloud\/es\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/geko.cloud\/es\/#\/schema\/logo\/image\/","url":"https:\/\/geko.cloud\/wp-content\/uploads\/2021\/10\/geko_logo-positivo.png","contentUrl":"https:\/\/geko.cloud\/wp-content\/uploads\/2021\/10\/geko_logo-positivo.png","width":1650,"height":809,"caption":"Geko Cloud"},"image":{"@id":"https:\/\/geko.cloud\/es\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/geko_cloud","https:\/\/www.instagram.com\/gekocloud\/","https:\/\/www.linkedin.com\/company\/gekocloud","https:\/\/www.youtube.com\/channel\/UC5EFLCqUM7fEaXSa_0nWowQ"]},{"@type":"Person","@id":"https:\/\/geko.cloud\/es\/#\/schema\/person\/e6acdb23fdedb5aadaee9a561e8f5f9e","name":"David Pujadas","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/geko.cloud\/es\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4757311410445249aa2aafa6278d9855?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4757311410445249aa2aafa6278d9855?s=96&d=mm&r=g","caption":"David Pujadas"}}]}},"_links":{"self":[{"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/posts\/2656"}],"collection":[{"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/comments?post=2656"}],"version-history":[{"count":3,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/posts\/2656\/revisions"}],"predecessor-version":[{"id":5208,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/posts\/2656\/revisions\/5208"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/media\/2323"}],"wp:attachment":[{"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/media?parent=2656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/categories?post=2656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geko.cloud\/en\/wp-json\/wp\/v2\/tags?post=2656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}