> ## Documentation Index
> Fetch the complete documentation index at: https://docs.infraudit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# infraudit remediation — remediation workflow commands

> infraudit remediation list, approve, run, rollback — manage AI-suggested fix actions for drift and vulnerability findings with approval-gated execution.

The `remediation` command group manages automated fix actions. InfraAudit generates AI-powered remediation suggestions for drift and vulnerability findings, which you review, approve, and then execute. Completed actions can be rolled back if needed.

## `remediation summary`

Show a summary of remediation actions grouped by status:

```bash theme={null}
infraudit remediation summary
```

## `remediation list`

List remediation actions with an optional status filter.

**Synopsis:**

```bash theme={null}
infraudit remediation list [flags]
```

| Flag       | Values                             | Description             |
| ---------- | ---------------------------------- | ----------------------- |
| `--status` | `pending`, `approved`, `completed` | Filter by action status |

Examples:

```bash theme={null}
# List all actions
infraudit remediation list

# Show actions waiting for approval
infraudit remediation list --status pending

# Show completed actions
infraudit remediation list --status completed
```

## `remediation pending`

List all remediation actions that are waiting for approval:

```bash theme={null}
infraudit remediation pending
```

## `remediation suggest-drift`

Generate an AI-powered fix suggestion for a specific drift finding:

**Synopsis:**

```bash theme={null}
infraudit remediation suggest-drift <drift-id>
```

Example:

```bash theme={null}
infraudit remediation suggest-drift 5
```

The suggestion includes a description of the change, the specific API call or configuration update required, and an estimated risk level.

## `remediation suggest-vuln`

Generate a fix suggestion for a specific vulnerability finding:

**Synopsis:**

```bash theme={null}
infraudit remediation suggest-vuln <vulnerability-id>
```

Example:

```bash theme={null}
infraudit remediation suggest-vuln 7
```

## `remediation approve`

Approve a pending remediation action so it can be executed:

**Synopsis:**

```bash theme={null}
infraudit remediation approve <action-id>
```

Example:

```bash theme={null}
infraudit remediation approve 3
```

<Warning>
  Review the suggested action carefully before approving. Approved actions modify live cloud resources when executed.
</Warning>

## `remediation run`

Execute an approved remediation action:

**Synopsis:**

```bash theme={null}
infraudit remediation run <action-id>
```

Example:

```bash theme={null}
infraudit remediation run 3
```

<Note>
  Only approved actions can be executed. If you attempt to run a pending action, the CLI returns an error.
</Note>

## `remediation rollback`

Roll back a previously executed remediation action and restore the resource to its prior state:

**Synopsis:**

```bash theme={null}
infraudit remediation rollback <action-id>
```

Example:

```bash theme={null}
infraudit remediation rollback 3
```

<Warning>
  Not all actions support rollback. Check the action details with `infraudit remediation list` before attempting to roll back.
</Warning>