Execute a remediation

POST

/remediations/{kind}

Execute a remediation action of the given kind against a target.
Supported kinds: resolve-dlp-alert — resolve (close) a DLP alert
after triage, recording the classification and propagating the
resolution to the source provider (e.g. Microsoft Purview) when a
provider integration is connected; its target_id is the Anzenna
detection id of the alert (see query_key_finding_detections) and
classification is required.

Request

Authorization

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Successful operation

Bodyapplication/json

🟠401Unauthorized

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location '/remediations/' \
--header 'Content-Type: application/json' \
--data '{
    "classification": "false_positive",
    "comment": "string",
    "target_id": "8CA67511-744C-4D74-B26E-7281CF88712F"
}'

Response Example

{
    "kind": "string",
    "message": "string",
    "provider_propagation": "queued",
    "state": "accepted",
    "target_id": "string"
}

Modified at 2026-07-24 15:31:52

List DLP policy detectors

Query all DLP alerts