There is a command group 'az_network_bastion'. This group of commands could 'manage azure bastion host machines'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_bastion_tunnel'.The syntax is: az network bastion tunnel --port
                          --resource-port
                          [--ids]
                          [--name]
                          [--resource-group]
                          [--subscription]
                          [--target-ip-address]
                          [--target-resource-id]
                          [--timeout]. The 1th example of the child command would be to use it to 'open a tunnel through azure bastion to a target virtual machine using resourceid', the syntax is: az network bastion tunnel --name MyBastionHost --resource-group MyResourceGroup --target-resource-id vmResourceId --resource-port 22 --port 50022. The 2th example of the child command would be to use it to 'open a tunnel through azure bastion to a target virtual machine using its ip address', the syntax is: az network bastion tunnel --name MyBastionHost --resource-group MyResourceGroup --target-ip-address 10.0.0.1 --resource-port 22 --port 50022. The parameter '--port' is required. It is used to local port to use for the tunneling.. The parameter '--resource-port' is required. It is used to resource port of the target vm to which the bastion will connect.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--name -n' is optional. name of the bastion host.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--target-ip-address' is optional. ip address of target virtual machine.. The parameter '--target-resource-id' is optional. resourceid of the target virtual machine.. The parameter '--timeout' is optional. timeout for connection to bastion host tunnel.. 