There is a command group 'az_keyvault_key'. This group of commands could 'manage keys'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_keyvault_key_create'.The syntax is: az keyvault key create [--curve {p-256, p-256k, p-384, p-521}]
                       [--default-cvm-policy]
                       [--disabled {false, true}]
                       [--expires]
                       [--exportable {false, true}]
                       [--hsm-name]
                       [--id]
                       [--immutable {false, true}]
                       [--kty {ec, ec-hsm, rsa, rsa-hsm, oct, oct-hsm}]
                       [--name]
                       [--not-before]
                       [--ops {decrypt, encrypt, export, import, sign, unwrapkey, verify, wrapkey}]
                       [--policy]
                       [--protection {hsm, software}]
                       [--size]
                       [--tags]
                       [--vault-name]. The parameter '--curve' is optional. elliptic curve name. for valid values, see: https://docs.microsoft.com/rest/api/keyvault/keys/create-key/create-key#jsonwebkeycurvename.. The parameter '--default-cvm-policy' is optional. use default policy under which the key can be exported for cvm disk encryption.. The parameter '--disabled' is optional. create key in disabled state.. The parameter '--expires' is optional. expiration utc datetime  (y-m-d't'h:m:s'z').. The parameter '--exportable' is optional. whether the private key can be exported. to create key with release policy, "exportable" must be true and caller must have "export" permission.. The parameter '--hsm-name' is optional. name of the hsm. (--hsm-name and --vault-name are mutually exclusive, please specify just one of them).. The parameter '--id' is optional. id of the key. if specified all other 'id' arguments should be omitted.. The parameter '--immutable' is optional. mark a release policy as immutable. an immutable release policy cannot be changed or updated after being marked immutable. release policies are mutable by default.. The parameter '--kty' is optional. the type of key to create. for valid values, see: https://docs.microsoft.com/rest/api/keyvault/keys/create-key/create-key#jsonwebkeytype.. The parameter '--name -n' is optional. name of the key. required if --id is not specified.. The parameter '--not-before' is optional. key not usable before the provided utc datetime  (y-m-d't'h:m:s'z').. The parameter '--ops' is optional. space-separated list of permitted json web key operations.. The parameter '--policy' is optional. the policy rules under which the key can be exported. policy definition as json, or a path to a file containing json policy definition.. The parameter '--protection -p' is optional. specifies the type of key protection.. The parameter '--size' is optional. the key size in bits. for example: 2048, 3072, or 4096 for rsa. 128, 192, or 256 for oct.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.. The parameter '--vault-name' is optional. name of the vault.. 