There is a command group 'az_palo alto_cloudngfw_local rulestack'. This group of commands could 'manage local rulestack resource'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_palo alto_cloudngfw_local rulestack_create'.The syntax is: az palo-alto cloudngfw local-rulestack create --local-rulestack-name
                                              --resource-group
                                              [--associated-subs]
                                              [--default-mode {firewall, ips, none}]
                                              [--description]
                                              [--identity]
                                              [--location]
                                              [--min-app-id-version]
                                              [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                              [--pan-etag]
                                              [--pan-location]
                                              [--scope {global, local}]
                                              [--security-services]
                                              [--tags]. The 1th example of the child command would be to use it to 'create a localrulestackresource', the syntax is: az palo-alto cloudngfw local-rulestack create -g MyResourceGroup -n MyLocalRulestacks --identity "{type:None}" --location eastus --default-mode IPS --description "local rulestacks" --min-app-id-version "8595-7473" --scope "LOCAL" --security-services "{vulnerability-profile:BestPractice,anti-spyware-profile:BestPractice,anti-virus-profile:BestPractice,url-filtering-profile:BestPractice,file-blocking-profile:BestPractice,dns-subscription:BestPractice}". The parameter '--local-rulestack-name --name -n' is required. It is used to localrulestack resource name.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--associated-subs --associated-subscriptions' is optional. subscription scope of global rulestack  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--default-mode' is optional. mode for default rules creation.. The parameter '--description' is optional. rulestack description.. The parameter '--identity' is optional. the managed service identities assigned to this resource.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--location -l' is optional. the geo-location where the resource lives  when not specified, the location of the resource group will be used.. The parameter '--min-app-id-version' is optional. minimum version.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--pan-etag' is optional. panetag info.. The parameter '--pan-location' is optional. rulestack location, required for globalrulestacks, not for localrulestacks.. The parameter '--scope' is optional. rulestack type.. The parameter '--security-services' is optional. security profile  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--tags' is optional. resource tags.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 