There is a command group 'az_storage_container'. This group of commands could 'manage blob storage containers'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_storage_container_generate sas'.The syntax is: az storage container generate-sas --name
                                  [--account-key]
                                  [--account-name]
                                  [--as-user]
                                  [--auth-mode {key, login}]
                                  [--cache-control]
                                  [--connection-string]
                                  [--content-disposition]
                                  [--content-encoding]
                                  [--content-language]
                                  [--content-type]
                                  [--expiry]
                                  [--https-only]
                                  [--ip]
                                  [--permissions]
                                  [--policy-name]
                                  [--sas-token]
                                  [--start]. The 1th example of the child command would be to use it to 'generate a sas token for blob container and use it to upload a blob', the syntax is: end=`date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ'`
sas=`az storage container generate-sas -n mycontainer --https-only --permissions dlrw --expiry $end -o tsv`
az storage blob upload -n MyBlob -c mycontainer -f file.txt --sas-token $sas. The 2th example of the child command would be to use it to 'generate a shared access signature for the container  autogenerated', the syntax is: az storage container generate-sas --account-key 00000000 --account-name mystorageaccount --expiry 2020-01-01 --name mycontainer --permissions dlrw. The 3th example of the child command would be to use it to 'generate a sas token for a storage container   autogenerated', the syntax is: az storage container generate-sas --account-name mystorageaccount --as-user --auth-mode login --expiry 2020-01-01 --name container1 --permissions dlrw. The parameter '--name -n' is required. It is used to the container name.. The parameter '--account-key' is optional. storage account key. must be used in conjunction with storage account name. environment variable: azure_storage_key.. The parameter '--account-name' is optional. storage account name. related environment variable: azure_storage_account. must be used in conjunction with either storage account key or a sas token. if neither are present, the command will try to query the storage account key using the authenticated azure account. if a large number of storage commands are executed the api quota may be hit.. The parameter '--as-user' is optional. indicates that this command return the sas signed with the user delegation key. the expiry parameter and '--auth-mode login' are required if this argument is specified.. The parameter '--auth-mode' is optional. the mode in which to run the command. "login" mode will directly use your login credentials for the authentication. the legacy "key" mode will attempt to query for an account key if no authentication parameters for the account are provided. environment variable: azure_storage_auth_mode.. The parameter '--cache-control' is optional. response header value for cache-control when resource is accessedusing this shared access signature.. The parameter '--connection-string' is optional. storage account connection string. environment variable: azure_storage_connection_string.. The parameter '--content-disposition' is optional. response header value for content-disposition when resource is accessedusing this shared access signature.. The parameter '--content-encoding' is optional. response header value for content-encoding when resource is accessedusing this shared access signature.. The parameter '--content-language' is optional. response header value for content-language when resource is accessedusing this shared access signature.. The parameter '--content-type' is optional. response header value for content-type when resource is accessedusing this shared access signature.. The parameter '--expiry' is optional. specifies the utc datetime (y-m-d't'h:m'z') at which the sas becomes invalid. do not use if a stored access policy is referenced with --policy-name that specifies this value.. The parameter '--https-only' is optional. only permit requests made with the https protocol. if omitted, requests from both the http and https protocol are permitted.. The parameter '--ip' is optional. specifies the ip address or range of ip addresses from which to accept requests. supports only ipv4 style addresses.. The parameter '--permissions' is optional. the permissions the sas grants. allowed values: (a)dd (a)dd (c)reate (c)reate (d)elete (d)elete (l)ist (l)ist (r)ead (r)ead (w)rite (w)rite. do not use if a stored access policy is referenced with --id that specifies this value. can be combined.. The parameter '--policy-name' is optional. the name of a stored access policy within the container's acl.. The parameter '--sas-token' is optional. a shared access signature (sas). must be used in conjunction with storage account name. environment variable: azure_storage_sas_token.. The parameter '--start' is optional. specifies the utc datetime (y-m-d't'h:m'z') at which the sas becomes valid. do not use if a stored access policy is referenced with --policy-name that specifies this value. defaults to the time of the request.. 