feat: Add connection and description field to finding's list of attributes

Google APIs · copybara-github · commit 50fc8347754f · 2022-04-18T11:28:56.000-07:00
PiperOrigin-RevId: 442589635
diff --git a/google/cloud/securitycenter/v1/BUILD.bazel b/google/cloud/securitycenter/v1/BUILD.bazel
@@ -54,11 +54,12 @@ proto_library(
         "access.proto",
         "asset.proto",
         "bigquery_export.proto",
+        "connection.proto",
         "external_system.proto",
         "finding.proto",
         "folder.proto",
-        "indicator.proto",
         "iam_binding.proto",
+        "indicator.proto",
         "mitre_attack.proto",
         "mute_config.proto",
         "notification_config.proto",
diff --git a/google/cloud/securitycenter/v1/connection.proto b/google/cloud/securitycenter/v1/connection.proto
@@ -0,0 +1,66 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.securitycenter.v1;
+
+option csharp_namespace = "Google.Cloud.SecurityCenter.V1";
+option go_package = "google.golang.org/genproto/googleapis/cloud/securitycenter/v1;securitycenter";
+option java_multiple_files = true;
+option java_outer_classname = "ConnectionProto";
+option java_package = "com.google.cloud.securitycenter.v1";
+option php_namespace = "Google\\Cloud\\SecurityCenter\\V1";
+option ruby_package = "Google::Cloud::SecurityCenter::V1";
+
+// Contains information about the IP connection associated with the finding.
+message Connection {
+  // IANA Internet Protocol Number such as TCP(6) and UDP(17).
+  enum Protocol {
+    // Unspecified protocol (not HOPOPT).
+    PROTOCOL_UNSPECIFIED = 0;
+
+    // Internet Control Message Protocol.
+    ICMP = 1;
+
+    // Transmission Control Protocol.
+    TCP = 6;
+
+    // User Datagram Protocol.
+    UDP = 17;
+
+    // Generic Routing Encapsulation.
+    GRE = 47;
+
+    // Encap Security Payload.
+    ESP = 50;
+  }
+
+  // Destination IP address. Not present for sockets that are listening and not
+  // connected.
+  string destination_ip = 1;
+
+  // Destination port. Not present for sockets that are listening and not
+  // connected.
+  int32 destination_port = 2;
+
+  // Source IP address.
+  string source_ip = 3;
+
+  // Source port.
+  int32 source_port = 4;
+
+  // IANA Internet Protocol Number such as TCP(6) and UDP(17).
+  Protocol protocol = 5;
+}
diff --git a/google/cloud/securitycenter/v1/finding.proto b/google/cloud/securitycenter/v1/finding.proto
@@ -19,6 +19,7 @@ package google.cloud.securitycenter.v1;
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/securitycenter/v1/access.proto";
+import "google/cloud/securitycenter/v1/connection.proto";
 import "google/cloud/securitycenter/v1/external_system.proto";
 import "google/cloud/securitycenter/v1/iam_binding.proto";
 import "google/cloud/securitycenter/v1/indicator.proto";
@@ -264,12 +265,18 @@ message Finding {
   // caller, which method was accessed, from where, etc.
   Access access = 26;
 
+  // Contains information about the IP connection associated with the finding.
+  repeated Connection connections = 31;
+
   // First known as mute_annotation. Records additional information about the
   // mute operation e.g. mute config that muted the finding, user who muted the
   // finding, etc. Unlike other attributes of a finding, a finding provider
   // shouldn't set the value of mute.
   string mute_initiator = 28;
 
+  // Contains more detail about the finding.
+  string description = 37;
+
   // Represents IAM bindings associated with the Finding.
   repeated IamBinding iam_bindings = 39;
 
diff --git a/google/cloud/securitycenter/v1/securitycenter_service.proto b/google/cloud/securitycenter/v1/securitycenter_service.proto
