- release_tracks: [ALPHA, BETA, GA]

  help_text:
    brief: Get the IAM policy for a Compute Engine subnetwork.
    description: |
      *{command}* displays the IAM policy associated with a
      Compute Engine subnetwork in a project. If formatted as JSON,
      the output can be edited and used as a policy file for
      set-iam-policy. The output includes an "etag" field
      identifying the version emitted and allowing detection of
      concurrent policy updates; see
      $ {parent} set-iam-policy for additional details.
    examples: |
      To print the IAM policy for a given subnetwork, run:

        $ {command} my-subnet --region=REGION

  request:
    collection: compute.subnetworks
    use_relative_name: false
    api_version: v1
    BETA:
      api_version: beta
      modify_request_hooks:
      - googlecloudsdk.command_lib.iam.hooks:UseMaxRequestedPolicyVersion:api_field=optionsRequestedPolicyVersion
    ALPHA:
      api_version: alpha
      modify_request_hooks:
      - googlecloudsdk.command_lib.iam.hooks:UseMaxRequestedPolicyVersion:api_field=optionsRequestedPolicyVersion

  arguments:
    resource:
      help_text: The network to display the IAM policy for.
      spec: !REF googlecloudsdk.command_lib.compute.resources:subnet
