- release_tracks: [ALPHA, BETA, GA]

  help_text:
    brief: Get the IAM policy for an import job.
    description: |
      Displays the IAM policy associated with an import job.
      If formatted as JSON, the output can be edited and used as
      a policy file for *set-iam-policy*. The output includes an "etag"
      field identifying the version emitted and allowing detection of
      concurrent policy updates;
      see $ {parent_command} set-iam-policy for additional details.
    examples: |
      To print the IAM policy for a given import job, run:

        $ {command} --keyring=my-key-ring --location=my-location my-importjob

  request:
    collection: cloudkms.projects.locations.keyRings.importJobs

  arguments:
    resource:
      help_text: The import job for which to get the IAM policy binding.
      spec: !REF googlecloudsdk.command_lib.kms.resources:import_job

  iam:
    policy_version: 3
    get_iam_policy_version_path: options_requestedPolicyVersion
