code: async function getKeyRingIamPolicy(
    projectId = 'your-project-id', // Your GCP projectId
    keyRingId = 'my-key-ring' // Name of the crypto key's key ring
  ) {
    // Import the library and create a client
    const kms = require('@google-cloud/kms');
    const client = new kms.KeyManagementServiceClient();
  
    // The location of the key ring, e.g. "global"
    const locationId = 'global';
  
    // Get the full path to the keyring
    const resource = client.keyRingPath(projectId, locationId, keyRingId);
  
    // Gets the IAM policy of a key ring
    const [policy] = await client.getIamPolicy({resource});
    if (policy.bindings && policy.bindings.length > 0) {
      policy.bindings.forEach(binding => {
        if (binding.members && binding.members.length) {
          console.log(`${binding.role}:`);
          binding.members.forEach(member => {
            console.log(`  ${member}`);
          });
        }
      });
    } else {
      console.log(`Policy for key ring ${keyRingId} is empty.`);
    }
  }
docs: [START kms_get_keyring_policy]