There is a command group 'az_iot_hub'. This group of commands could 'manage azure iot hubs'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_iot_hub_generate sas token'.The syntax is: az iot hub generate-sas-token [--auth-type {key, login}]
                              [--connection-string]
                              [--device-id]
                              [--du]
                              [--hub-name]
                              [--key-type {primary, secondary}]
                              [--login]
                              [--module-id]
                              [--pn]
                              [--resource-group]. The 1th example of the child command would be to use it to 'generate an iot hub sas token using the iothubowner policy and primary key', the syntax is: az iot hub generate-sas-token -n {iothub_name}. The 2th example of the child command would be to use it to 'generate an iot hub sas token using the registryread policy and secondary key', the syntax is: az iot hub generate-sas-token -n {iothub_name} --policy registryRead --key-type secondary. The 3th example of the child command would be to use it to 'generate a device sas token using the iothubowner policy to access the  iothub_name  device registry', the syntax is: az iot hub generate-sas-token -d {device_id} -n {iothub_name}. The 4th example of the child command would be to use it to 'generate a device sas token using an iot hub connection string  with registry access', the syntax is: az iot hub generate-sas-token -d {device_id} --login 'HostName=myhub.azure-devices.net;SharedAccessKeyName=iothubowner;SharedAccessKey=12345'. The 5th example of the child command would be to use it to 'generate an iot hub sas token using an iot hub connection string', the syntax is: az iot hub generate-sas-token --connection-string 'HostName=myhub.azure-devices.net;SharedAccessKeyName=iothubowner;SharedAccessKey=12345'. The 6th example of the child command would be to use it to 'generate a device sas token using a device connection string', the syntax is: az iot hub generate-sas-token --connection-string 'HostName=myhub.azure-devices.net;DeviceId=mydevice;SharedAccessKeyName=iothubowner;SharedAccessKey=12345'. The 7th example of the child command would be to use it to 'generate a module sas token using a module connection string', the syntax is: az iot hub generate-sas-token --connection-string 'HostName=myhub.azure-devices.net;DeviceId=mydevice;ModuleId=mymodule;SharedAccessKeyName=iothubowner;SharedAccessKey=12345'. The parameter '--auth-type' is optional. indicates whether the operation should auto-derive a policy key or use the current azure ad session. if the authentication type is login and the resource hostname is provided, resource lookup will be skipped unless needed.you can configure the default using `az configure --defaults iothub-data-auth-type=<auth-type-value>`.. The parameter '--connection-string --cs' is optional. target connection string. this bypasses the iot hub registry and generates the sas token directly from the supplied symmetric key without further validation. all other command parameters aside from duration will be ignored. supported connection string types: iot hub, device, module.. The parameter '--device-id -d' is optional. target device id.. The parameter '--du --duration' is optional. valid token duration in seconds.. The parameter '--hub-name -n' is optional. iot hub name or hostname. required if --login is not provided.. The parameter '--key-type --kt' is optional. shared access policy key type for authentication.. The parameter '--login -l' is optional. this command supports an entity connection string with rights to perform action. use to avoid session login via "az login". if both an entity connection string and name are provided the connection string takes priority. required if --hub-name is not provided.. The parameter '--module-id -m' is optional. target module id.. The parameter '--pn --policy-name' is optional. shared access policy with operation permissions for target iot hub entity.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. 