> This page is for What's New. > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.eon.io/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.eon.io/_mcp/server. # August 5, 2026 ## New: Action approval methods Methods protected by an action approval rule no longer carry out the action right away. Instead, Eon intercepts the call, responds with `201`, and returns an action request in the `CREATED` status in the `actionApprovalRequest` object. Three new methods let you complete the flow: * [Submit My Action Request]: Submits an action request for approval, or discards it. * [Get My Action Request]: Retrieves an action request created with the current caller's credentials. * [Cancel My Action Request]: Cancels an action request that's approved or pending approval. Once a request is approved, retry the original call with the request ID in the new optional `X-Action-Approval-Request-Id` header. The retried call must match the original request parameters, and only the original requester can apply the approved request. These methods now accept this header and can return the `201` interception response: * Backup policies: [Create Backup Policy], [Update Backup Policy], and [Delete Backup Policy]. * Restore connections: [Connect Restore Account], [Reconnect Restore Account], and [Connect Restore AWS Organizational Unit]. * Snapshots: [Remove Snapshot Hold]. * All restore methods for AWS, Azure, GCP, and buckets. If a method isn't protected by a rule in your account, it behaves as before. For the full flow, see [Action Approvals](/api/using-the-api/action-approvals). ## New: Backup posture control methods Backup posture controls define backup requirements that matching resources must satisfy, along with the severity assigned to violations. Five new methods manage them: * [Create Backup Posture Control]: Creates a control with a resource selector, rules, and severity. * [List Backup Posture Controls]: Retrieves a paginated list of controls, sortable by `NAME` or `SEVERITY`. * [Get Backup Posture Control]: Retrieves a single control by ID. * [Update Backup Posture Control]: Updates a control. * [Delete Backup Posture Control]: Removes a control. ## New: Restore AWS organizational unit methods You can now connect an AWS organizational unit (OU) as a restore destination, which discovers all current and future descendant accounts as restore accounts: * [Connect Restore AWS Organizational Unit]: Connects an OU to a project as a restore destination. * [List Restore AWS Organizational Units]: Retrieves a paginated list of connected restore OUs. * [Disconnect Restore AWS Organizational Unit]: Disconnects an OU, after which its descendant accounts are no longer available as restore targets. * [Reconnect Restore AWS Organizational Unit]: Reconnects a previously disconnected OU and its descendant accounts. ## New: Restore account retrieval [Get Restore Account] retrieves a single restore account by ID. ## New: AWS native standard backup policies `AWS_NATIVE_STANDARD` is now a valid `backupPlan.backupPolicyType` value, with a matching optional `backupPlan.awsNativeStandardPlan` property. Use it to define backup schedules that specify a frequency, retention period, and target region, plus an optional vault protection mode. Both are available in [Create Backup Policy] and [Update Backup Policy], and are returned in [Get Backup Policy] and [List Backup Policies]. ## Updated: Time zone for backup schedules Standard and high-frequency backup plans now accept an optional `scheduleTimezone` property, available in [Create Backup Policy] and [Update Backup Policy] and returned in [Get Backup Policy] and [List Backup Policies]. `UTC` runs schedule windows at a fixed UTC hour, and `RESOURCE` runs them at the same local hour in each resource's own region time zone. `UTC` is the default, so existing policies keep their current behavior. ## Updated: Source account tag conditions in backup policies Backup policy resource selectors accept two new optional expression properties that match resources by the tags of the cloud account they belong to, rather than by the resource's own tags: * `sourceAccountTagKeys` matches on account tag keys. * `sourceAccountTagKeyValues` matches on account tag key-value pairs. Both are available in [Create Backup Policy] and [Update Backup Policy], and are returned in [Get Backup Policy] and [List Backup Policies]. ## Updated: New permissions Six new permission types are available in [List Permissions], and can be granted in [Create Role] and [Update Role]: * `data_catalog.view`. * `discovery.trigger`. * `file_explorer.delete`. * `network_classification.override`. * `storage_gateway_data.download`. * `storage_gateway_metadata.view`. The new values are also returned in [Get Role] and [List Roles]. ## Updated: DynamoDB table properties and indexes [List Resources] and [Get Resource] now return a `resourceProperties.awsDynamoDb` object with the table's billing mode and provisioned read and write capacity units. Global secondary indexes are omitted by default to keep responses small. To include them, set the new optional `include` query parameter to `DYNAMODB_INDEXES`. [List Backup Jobs] and [Get Backup Job] add `AWS_DYNAMO_DB_BACKUP_FULL_EXPORT` as a `backupType` value, which you can also use in the `filters.backupType` request property. In [Restore DynamoDB Table], `destination.awsDynamodb.encryptionKeyId` is now optional. ## Updated: Job rejection and skip statuses Backup and restore job responses add two `jobExecutionDetails.status` values, `JOB_REJECTED` and `JOB_SKIPPED`, and one `jobExecutionDetails.errorCode` value, `CLASSIFICATION_CONFLICT`. The status values are available in [List Backup Jobs], [Get Backup Job], [List Restore Jobs], and [Get Restore Job], and you can filter on them through `filters.status` in the list methods. Clients that map job statuses to a fixed set need updating to handle the new values. ## Updated: Notes on snapshot holds [Hold Snapshot] now accepts an optional request body with a `description` property, up to 500 characters, explaining why the snapshot is being held. The note is returned as `holdDescription` in [Get Snapshot] and [List Snapshots], and is cleared when the hold is removed. ## Updated: Private IP addresses for instance restore You can now assign a specific private IPv4 address to a restored instance instead of letting the cloud provider auto-assign one. The address must fall within the selected subnet's CIDR range: * [Restore EC2 Instance] accepts an optional `destination.awsEc2.privateIpAddress` property. * [Restore GCP VM Instance] accepts an optional `destination.gcpVm.internalIp` property. ## Updated: View selection for BigQuery restore [Restore BigQuery Dataset] accepts an optional `destination.selectedViews` property that limits the restore to named views. If you omit it, all views in the snapshot are restored. [List Restore Jobs] and [Get Restore Job] now return a `destinationDetails.restoreResult.gcpBigQuery` object for BigQuery dataset restores. ## Updated: Display names for IdP group role assignments [Create IdP Group] and [Update IdP Group] accept an optional `displayName` property, which is returned in [Get IdP Group] and [List IdP Groups]. Display names aren't used when Eon matches SAML groups during single sign-on. In [Update IdP Group], omit the property or send null to leave the existing display name unchanged, and send an empty string to clear it. ## Updated: Cost metering dimensions [Query Cost Data] adds three `costs[].meteringDimension` values: * `AZURE_POSTGRESQL_METERING_DIMENSION`. * `CLASSIFICATION_METERING_DIMENSION`. * `STORAGE_GATEWAY_METERING_DIMENSION`. [Submit My Action Request]: /api/api-reference/access-management/action-approvals/my-action-requests/create-action-approval-request [Get My Action Request]: /api/api-reference/access-management/action-approvals/my-action-requests/get-my-action-approval-request [Cancel My Action Request]: /api/api-reference/access-management/action-approvals/my-action-requests/cancel-action-approval-request [Create Backup Posture Control]: /api/api-reference/backup-management/backup-posture-controls/create-backup-posture-control [List Backup Posture Controls]: /api/api-reference/backup-management/backup-posture-controls/list-backup-posture-controls [Get Backup Posture Control]: /api/api-reference/backup-management/backup-posture-controls/get-backup-posture-control [Update Backup Posture Control]: /api/api-reference/backup-management/backup-posture-controls/update-backup-posture-control [Delete Backup Posture Control]: /api/api-reference/backup-management/backup-posture-controls/delete-backup-posture-control [Connect Restore AWS Organizational Unit]: /api/api-reference/restore-connections/restore-aws-ous/connect-restore-aws-organizational-unit [List Restore AWS Organizational Units]: /api/api-reference/restore-connections/restore-aws-ous/list-restore-aws-organizational-units [Disconnect Restore AWS Organizational Unit]: /api/api-reference/restore-connections/restore-aws-ous/disconnect-restore-aws-organizational-unit [Reconnect Restore AWS Organizational Unit]: /api/api-reference/restore-connections/restore-aws-ous/reconnect-restore-aws-organizational-unit [Connect Restore Account]: /api/api-reference/restore-connections/restore-accounts/connect-restore-account [Get Restore Account]: /api/api-reference/restore-connections/restore-accounts/get-restore-account [Reconnect Restore Account]: /api/api-reference/restore-connections/restore-accounts/reconnect-restore-account [Create Backup Policy]: /api/api-reference/backup-management/backup-policies/create-backup-policy [Update Backup Policy]: /api/api-reference/backup-management/backup-policies/update-backup-policy [Get Backup Policy]: /api/api-reference/backup-management/backup-policies/get-backup-policy [List Backup Policies]: /api/api-reference/backup-management/backup-policies/list-backup-policies [Delete Backup Policy]: /api/api-reference/backup-management/backup-policies/delete-backup-policy [List Permissions]: /api/api-reference/access-management/roles/list-permissions [Create Role]: /api/api-reference/access-management/roles/create-role [Update Role]: /api/api-reference/access-management/roles/update-role [Get Role]: /api/api-reference/access-management/roles/get-role [List Roles]: /api/api-reference/access-management/roles/list-roles [List Resources]: /api/api-reference/resources/list-resources [Get Resource]: /api/api-reference/resources/get-resource [List Backup Jobs]: /api/api-reference/jobs/backup-jobs/list-backup-jobs [Get Backup Job]: /api/api-reference/jobs/backup-jobs/get-backup-job [List Restore Jobs]: /api/api-reference/jobs/restore-jobs/list-restore-jobs [Get Restore Job]: /api/api-reference/jobs/restore-jobs/get-restore-job [Restore DynamoDB Table]: /api/api-reference/restore/restore-aws/restore-dynamo-db-table [Restore EC2 Instance]: /api/api-reference/restore/restore-aws/restore-ec-2-instance [Restore GCP VM Instance]: /api/api-reference/restore/restore-gcp/restore-gcp-vm-instance [Restore BigQuery Dataset]: /api/api-reference/restore/restore-gcp/restore-big-query-dataset [Hold Snapshot]: /api/api-reference/backup-management/snapshots/hold-snapshot [Remove Snapshot Hold]: /api/api-reference/backup-management/snapshots/remove-snapshot-hold [Get Snapshot]: /api/api-reference/backup-management/snapshots/get-snapshot [List Snapshots]: /api/api-reference/backup-management/snapshots/list-resource-snapshots [Create IdP Group]: /api/api-reference/access-management/id-p-group-role-assignments/create-idp-group [Update IdP Group]: /api/api-reference/access-management/id-p-group-role-assignments/update-idp-group [Get IdP Group]: /api/api-reference/access-management/id-p-group-role-assignments/get-idp-group [List IdP Groups]: /api/api-reference/access-management/id-p-group-role-assignments/list-idp-groups [Query Cost Data]: /api/api-reference/billing/query-cost-data