There is a command group 'az_security_automation'. This group of commands could 'view your security automations'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_security_automation_create_or_update'.The syntax is: az security automation create_or_update --actions
                                        --name
                                        --resource-group
                                        --scopes
                                        --sources
                                        [--description]
                                        [--etag]
                                        [--isenabled]
                                        [--location]
                                        [--tags]. The 1th example of the child command would be to use it to 'creates a security automation', the syntax is: az security automation create_or_update -g Sample-RG -n sampleAutomation -l eastus --scopes '[{"description": "Scope for 487bb485-b5b0-471e-9c0d-10717612f869", "scopePath": "/subscriptions/487bb485-b5b0-471e-9c0d-10717612f869"}]' --sources '[{"eventSource":"SubAssessments","ruleSets":null}]' --actions '[{"actionType":"EventHub","eventHubResourceId":"subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ContosoSiemPipeRg/providers/Microsoft.EventHub/namespaces/contososiempipe-ns/eventhubs/surashed-test","connectionString":"Endpoint=sb://contososiempipe-ns.servicebus.windows.net/;SharedAccessKeyName=Send;SharedAccessKey=dummy=;EntityPath=dummy","SasPolicyName":"dummy"}]'. The parameter '--actions' is required. It is used to a collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.. The parameter '--name -n' is required. It is used to name of the resource to be fetched.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--scopes' is required. It is used to a collection of scopes on which the security automations logic is applied.. The parameter '--sources' is required. It is used to a collection of the source event types which evaluate the security automation set of rules.. The parameter '--description' is optional. the security automation description.. The parameter '--etag' is optional. entity tag is used for comparing two or more entities from the same requested resource.. The parameter '--isenabled' is optional. indicates whether the security automation is enabled.. The parameter '--location -l' is optional. location of the resource.. The parameter '--tags' is optional. a list of key value pairs that describe the resource.. 