There is a command group 'az_palo alto_cloudngfw_firewall'. This group of commands could 'manage cloudngfw firewall resource'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_palo alto_cloudngfw_firewall_create'.The syntax is: az palo-alto cloudngfw firewall create --dns-settings
                                       --firewall-name
                                       --marketplace-details
                                       --network-profile
                                       --plan-data
                                       --resource-group
                                       [--associated-rulestack]
                                       [--front-end-settings]
                                       [--identity]
                                       [--is-panorama-managed {false, true}]
                                       [--location]
                                       [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                       [--pan-etag]
                                       [--panorama-config]
                                       [--tags]. The 1th example of the child command would be to use it to 'create a firewallresource', the syntax is: az palo-alto cloudngfw firewall create --name MyCloudngfwFirewall -g MyResourceGroup --location eastus --associated-rulestack "{location:eastus,resource-id:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MyResourceGroup/providers/PaloAltoNetworks.Cloudngfw/localRulestacks/MyLocalRulestacks}" --dns-settings "{enable-dns-proxy:DISABLED,enabled-dns-type:CUSTOM}" --is-panorama-managed FALSE --marketplace-details "{marketplace-subscription-status:Subscribed,offer-id:offer-id,publisher-id:publisher-id}" --network-profile "{egress-nat-ip:[],enable-egress-nat:DISABLED,network-type:VNET,public-ips:[{address:10.0.0.0/16,resource-id:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MyResourceGroup/providers/Microsoft.Network/publicIPAddresses/MypublicIP}],vnet-configuration:{ip-of-trust-subnet-for-udr:{address:10.0.0.0/16},trust-subnet:{resource-id:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MyResourceGroup/providers/Microsoft.Network/virtualNetworks/MyVnet/subnets/subnet1},un-trust-subnet:{resource-id:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MyResourceGroup/providers/Microsoft.Network/virtualNetworks/MyVnet/subnets/subnet1},vnet:{resource-id:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MyResourceGroup/providers/Microsoft.Network/virtualNetworks/MyVnet}}}" --panorama-config "{config-string:bas64EncodedString}" --plan-data "{billing-cycle:MONTHLY,plan-id:plan-id,usage-type:PAYG}". The parameter '--dns-settings' is required. It is used to dns settings for firewall  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--firewall-name --name -n' is required. It is used to firewall resource name.. The parameter '--marketplace-details' is required. It is used to marketplace details  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--network-profile' is required. It is used to network settings  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--plan-data' is required. It is used to billing plan information.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--associated-rulestack' is optional. associated rulestack  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--front-end-settings' is optional. frontend settings for firewall  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--identity' is optional. the managed service identities assigned to this resource.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--is-panorama-managed' is optional. panorama managed: default is false. default will be cloudsec managed.. The parameter '--location -l' is optional. the geo-location where the resource lives  when not specified, the location of the resource group will be used.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--pan-etag' is optional. panetag info.. The parameter '--panorama-config' is optional. panorama configuration  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--tags' is optional. resource tags.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 