Terraform Provider for Eon

The Terraform provider for Eon allows you to manage your cloud backup and restore infrastructure using Infrastructure as Code (IaC). Connect cloud accounts, manage backup policies, and orchestrate disaster recovery workflows with Terraform.

Features

• Source Account Management: Connect and manage cloud accounts containing resources to be backed up
• Restore Account Management: Connect and manage cloud accounts where backups can be restored
• Backup Policy Management: Create, update, and manage backup policies with schedules, retention, and notifications
• Multi-Cloud Support: AWS, Azure, and GCP (AWS fully supported, Azure and GCP in development)
• Data Sources: Query existing source and restore accounts, backup policies, and snapshots

Requirements

• Terraform >= 1.0
• Go >= 1.22 (for development)

Installation

Terraform Registry (Recommended)

terraform {
  required_providers {
    eon = {
      source  = "eon-io/eon"
      version = "~> 1.0"
    }
  }
}

Manual Installation

1. Download the latest release from the releases page
2. Extract the binary to your Terraform plugins directory
3. Run terraform init

Authentication

The provider supports authentication via OAuth2 client credentials. You can configure authentication in several ways:

Environment Variables (Recommended)

export EON_ENDPOINT="https://your-eon-instance.eon.io"
export EON_CLIENT_ID="your-client-id"
export EON_CLIENT_SECRET="your-client-secret"
export EON_PROJECT_ID="your-project-id"

Provider Configuration

provider "eon" {
  endpoint      = "https://your-eon-instance.eon.io"
  client_id     = "your-client-id"
  client_secret = "your-client-secret"
  project_id    = "your-project-id"
}

Usage Examples

Basic Source Account

# Connect an AWS source account
resource "eon_source_account" "aws_production" {
  name                = "Production AWS Account"
  cloud_provider      = "AWS"
  provider_account_id = "123456789012"
  role               = "arn:aws:iam::123456789012:role/EonBackupRole"
}

Basic Restore Account

# Connect an AWS restore account
resource "eon_restore_account" "aws_disaster_recovery" {
  name                = "Disaster Recovery AWS Account"
  cloud_provider      = "AWS"
  provider_account_id = "987654321098"
  role               = "arn:aws:iam::987654321098:role/EonRestoreRole"
}

Basic Backup Policy

# Create a backup policy
resource "eon_backup_policy" "all_resources" {
  name         = "All Resources Policy"
  enabled      = true
  resource_selector = {
    resource_selection_mode = "ALL"
  }

  backup_plan = {
    backup_policy_type = "STANDARD"
    standard_plan = {
      backup_schedules = [
        {
          vault_id = "vault-all"
          retention_days = 90
          schedule_config = {
            frequency = "DAILY"
            daily_config = {
              time_of_day_hour = 1
              time_of_day_minutes = 0
              start_window_minutes = 360
            }
          }
        }
      ]
    }
  }
}

Data Sources

# List all source accounts
data "eon_source_accounts" "all" {}

# List all restore accounts
data "eon_restore_accounts" "all" {}

# List all backup policies
data "eon_backup_policies" "all" {}

output "source_account_count" {
  value = length(data.eon_source_accounts.all.accounts)
}

output "backup_policy_count" {
  value = length(data.eon_backup_policies.all.policies)
}

Resources

eon_source_account

Manages source accounts for backup operations.

Arguments:

• name (Required) - Display name for the source account
• cloud_provider (Required) - Cloud provider (AWS, AZURE, GCP)
• provider_account_id (Required) - Cloud provider account ID
• role (Required) - IAM role ARN (AWS), service principal (Azure), or service account email (GCP)

Attributes:

• id - Source account identifier
• status - Connection status
• created_at - Creation timestamp
• updated_at - Last update timestamp

eon_restore_account

Manages restore accounts for restore operations.

Arguments:

• name (Required) - Display name for the restore account
• cloud_provider (Required) - Cloud provider (AWS, AZURE, GCP)
• provider_account_id (Required) - Cloud provider account ID
• role (Required) - IAM role ARN (AWS), service principal (Azure), or service account email (GCP)

Attributes:

• id - Restore account identifier
• status - Connection status
• created_at - Creation timestamp
• updated_at - Last update timestamp

eon_backup_policy

Manages backup policies for automated backup operations.

Arguments:

• name (Required) - Display name for the backup policy
• enabled (Required) - Whether the backup policy is enabled
• resource_selection_mode (Required) - Resource selection mode: 'ALL', 'NONE', or 'CONDITIONAL'
• backup_policy_type (Required) - Backup policy type: 'STANDARD', 'HIGH_FREQUENCY', or 'PITR'
• vault_id (Required) - Vault ID to associate with the backup policy
• schedule_frequency (Required) - Frequency for the backup schedule
• retention_days (Required) - Number of days to retain backups
• resource_inclusion_override (Optional) - List of resource IDs to include regardless of selection mode
• resource_exclusion_override (Optional) - List of resource IDs to exclude regardless of selection mode

Attributes:

• id - Backup policy identifier
• created_at - Creation timestamp
• updated_at - Last update timestamp

Data Sources

eon_source_accounts

Retrieves information about all source accounts.

Attributes:

• accounts - List of source account objects with id, name, provider, provider_account_id, and status

eon_restore_accounts

Retrieves information about all restore accounts.

Attributes:

• accounts - List of restore account objects with id, provider, provider_account_id, status, and regions

eon_backup_policies

Retrieves information about all backup policies.

Attributes:

• policies - List of backup policy objects with id, name, and enabled