There is a command group 'az_storage_queue'. This group of commands could 'manage storage queues'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_queue_generate sas'.The syntax is: az storage queue generate-sas --name
                              [--account-key]
                              [--account-name]
                              [--auth-mode {key, login}]
                              [--connection-string]
                              [--expiry]
                              [--https-only]
                              [--ip]
                              [--permissions]
                              [--policy-name]
                              [--sas-token]
                              [--start]. The 1th example of the child command would be to use it to 'generate a sas token for the queue with read only permissions', the syntax is: end=`date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ'`
az storage queue generate-sas -n myqueue --account-name mystorageaccount --permissions r --expiry $end --https-only. The 2th example of the child command would be to use it to 'generate a sas token for the queue with ip range specified', the syntax is: end=`date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ'`
az storage queue generate-sas -n myqueue --account-name mystorageaccount --ip "176.134.171.0-176.134.171.255" --permissions r --expiry $end --https-only. The parameter '--name -n' is required. It is used to the queue name.. The parameter '--account-key' is optional. storage account key. must be used in conjunction with storage account name. environment variable: azure_storage_key.. The parameter '--account-name' is optional. storage account name. related environment variable: azure_storage_account. must be used in conjunction with either storage account key or a sas token. if neither are present, the command will try to query the storage account key using the authenticated azure account. if a large number of storage commands are executed the api quota may be hit.. The parameter '--auth-mode' is optional. the mode in which to run the command. "login" mode will directly use your login credentials for the authentication. the legacy "key" mode will attempt to query for an account key if no authentication parameters for the account are provided. environment variable: azure_storage_auth_mode.. The parameter '--connection-string' is optional. storage account connection string. environment variable: azure_storage_connection_string.. The parameter '--expiry' is optional. specifies the utc datetime (y-m-d't'h:m'z') at which the sas becomes invalid. do not use if a stored access policy is referenced with --policy-name that specifies this value.. The parameter '--https-only' is optional. only permit requests made with the https protocol. if omitted, requests from both the http and https protocol are permitted.. The parameter '--ip' is optional. specifies the ip address or range of ip addresses from which to accept requests. supports only ipv4 style addresses.. The parameter '--permissions' is optional. the permissions the sas grants. allowed values: (a)dd (a)dd (p)rocess (p)rocess (r)ead (r)ead (u)pdate (u)pdate. do not use if a stored access policy is referenced with --id that specifies this value. can be combined.. The parameter '--policy-name' is optional. the name of a stored access policy within the share's acl.. The parameter '--sas-token' is optional. a shared access signature (sas). must be used in conjunction with storage account name. environment variable: azure_storage_sas_token.. The parameter '--start' is optional. specifies the utc datetime (y-m-d't'h:m'z') at which the sas becomes valid. do not use if a stored access policy is referenced with --policy-name that specifies this value. defaults to the time of the request.. 