Skip to navigation

API Changelog

August 5, 2026

August 5, 2026

New: Action approval methods

Methods protected by an action approval rule no longer carry out the action right away. Instead, Eon intercepts the call, responds with 201, and returns an action request in the CREATED status in the actionApprovalRequest object. Three new methods let you complete the flow:

Once a request is approved, retry the original call with the request ID in the new optional X-Action-Approval-Request-Id header. The retried call must match the original request parameters, and only the original requester can apply the approved request.

These methods now accept this header and can return the 201 interception response:

If a method isn’t protected by a rule in your account, it behaves as before. For the full flow, see Action Approvals.

New: Backup posture control methods

Backup posture controls define backup requirements that matching resources must satisfy, along with the severity assigned to violations. Five new methods manage them:

New: Restore AWS organizational unit methods

You can now connect an AWS organizational unit (OU) as a restore destination, which discovers all current and future descendant accounts as restore accounts:

New: Restore account retrieval

Get Restore Account retrieves a single restore account by ID.

New: AWS native standard backup policies

AWS_NATIVE_STANDARD is now a valid backupPlan.backupPolicyType value, with a matching optional backupPlan.awsNativeStandardPlan property. Use it to define backup schedules that specify a frequency, retention period, and target region, plus an optional vault protection mode. Both are available in Create Backup Policy and Update Backup Policy, and are returned in Get Backup Policy and List Backup Policies.

Updated: Time zone for backup schedules

Standard and high-frequency backup plans now accept an optional scheduleTimezone property, available in Create Backup Policy and Update Backup Policy and returned in Get Backup Policy and List Backup Policies. UTC runs schedule windows at a fixed UTC hour, and RESOURCE runs them at the same local hour in each resource’s own region time zone. UTC is the default, so existing policies keep their current behavior.

Updated: Source account tag conditions in backup policies

Backup policy resource selectors accept two new optional expression properties that match resources by the tags of the cloud account they belong to, rather than by the resource’s own tags:

  • sourceAccountTagKeys matches on account tag keys.

  • sourceAccountTagKeyValues matches on account tag key-value pairs.

Both are available in Create Backup Policy and Update Backup Policy, and are returned in Get Backup Policy and List Backup Policies.

Updated: New permissions

Six new permission types are available in List Permissions, and can be granted in Create Role and Update Role:

  • data_catalog.view.

  • discovery.trigger.

  • file_explorer.delete.

  • network_classification.override.

  • storage_gateway_data.download.

  • storage_gateway_metadata.view.

The new values are also returned in Get Role and List Roles.

Updated: DynamoDB table properties and indexes

List Resources and Get Resource now return a resourceProperties.awsDynamoDb object with the table’s billing mode and provisioned read and write capacity units.

Global secondary indexes are omitted by default to keep responses small. To include them, set the new optional include query parameter to DYNAMODB_INDEXES.

List Backup Jobs and Get Backup Job add AWS_DYNAMO_DB_BACKUP_FULL_EXPORT as a backupType value, which you can also use in the filters.backupType request property.

In Restore DynamoDB Table, destination.awsDynamodb.encryptionKeyId is now optional.

Updated: Job rejection and skip statuses

Backup and restore job responses add two jobExecutionDetails.status values, JOB_REJECTED and JOB_SKIPPED, and one jobExecutionDetails.errorCode value, CLASSIFICATION_CONFLICT. The status values are available in List Backup Jobs, Get Backup Job, List Restore Jobs, and Get Restore Job, and you can filter on them through filters.status in the list methods. Clients that map job statuses to a fixed set need updating to handle the new values.

Updated: Notes on snapshot holds

Hold Snapshot now accepts an optional request body with a description property, up to 500 characters, explaining why the snapshot is being held. The note is returned as holdDescription in Get Snapshot and List Snapshots, and is cleared when the hold is removed.

Updated: Private IP addresses for instance restore

You can now assign a specific private IPv4 address to a restored instance instead of letting the cloud provider auto-assign one. The address must fall within the selected subnet’s CIDR range:

Updated: View selection for BigQuery restore

Restore BigQuery Dataset accepts an optional destination.selectedViews property that limits the restore to named views. If you omit it, all views in the snapshot are restored.

List Restore Jobs and Get Restore Job now return a destinationDetails.restoreResult.gcpBigQuery object for BigQuery dataset restores.

Updated: Display names for IdP group role assignments

Create IdP Group and Update IdP Group accept an optional displayName property, which is returned in Get IdP Group and List IdP Groups. Display names aren’t used when Eon matches SAML groups during single sign-on. In Update IdP Group, omit the property or send null to leave the existing display name unchanged, and send an empty string to clear it.

Updated: Cost metering dimensions

Query Cost Data adds three costs[].meteringDimension values:

  • AZURE_POSTGRESQL_METERING_DIMENSION.

  • CLASSIFICATION_METERING_DIMENSION.

  • STORAGE_GATEWAY_METERING_DIMENSION.

Was this page helpful?