azure cli

Print the Azure CLI version + the Python interpreter it uses.

Search for `az` commands by keyword — uses a static search index shipped with the CLI.

Show every command under a group.

<group> --help; <group> <command> --help

Show flags + examples for a single command.

Drop into an interactive shell with auto-completion, syntax highlighting, and inline docs.

--style; --update; --no-param-expansion

Launch a browser-based login (uses device code flow when no display is available).

--use-device-code; --tenant <tenant>; --service-principal -u <id> -p <secret> --tenant <tenant>; --federated-token <token>; --identity

Use the device-code flow — prints a URL + code to paste in a browser on any device.

Login as a service principal with a client secret (CI / automation).

-u <id>; -p <secret>; --tenant <tenant>; --federated-token <jwt>

Clear all credentials and end the current session.

--username <upn>

Print the currently active subscription, tenant, and user.

--output table; --query

List every subscription your account has access to.

--output table; --query '[].{name:name,id:id}'; --all

Switch the active subscription for subsequent commands.

--subscription <id>; --name <name>

Clear all subscriptions from the local cache (forces a re-login).

Choose output format: `json` (default), `table`, `tsv`, `yaml`, `yamlc`, `none`.

json; table; tsv; yaml; yamlc; none

Project the response with a JMESPath expression.

--query '[].name'; --query 'length(@)'; --query 'sort_by(@, &name)'

Return immediately without waiting for the long-running operation to complete (poll later with `az <verb> wait`).

List every resource group in the active subscription.

--output table; --query '[].name'

Create a new resource group.

--name; --location eastus; --tags env=prod

Delete a resource group + every resource it contains (irreversible).

--name; --yes; --no-wait

List every Azure resource under the current subscription.

--resource-group <rg>; --resource-type <type>; --name <name>; --tag env=prod

Manage resource tags at scale (resource-group level).

create; update; list; delete

List every VM with its size + status.

--resource-group; --show-details; --query

Start a VM (deallocates compute if it was previously stopped).

--no-wait

Stop (deallocate) a VM to stop compute billing.

--no-wait

Use the new native SSH support (Azure CLI 2.30+) to open a session without an explicit public IP.

-n; -g; --ssh-key-file <path>; --port <p>

List every AKS cluster.

--resource-group; --output table

Merge the cluster's kubeconfig into `~/.kube/config` and switch context.

--name; --resource-group; --admin; --overwrite-existing; --file <kubeconfig>

Create an AKS cluster. Most common flags: `--node-count`, `--node-vm-size`, `--kubernetes-version`, `--generate-ssh-keys`.

--name; -g; --node-count; --node-vm-size; --kubernetes-version; --generate-ssh-keys; --service-principal; --no-ssh-key

List every storage account.

--output table; --query '[].name'

Upload a file as a blob. Use `--account-key`, SAS token, or auth-mode login.

--account-name; --container-name; --name; --file <local>; --auth-mode login; --sas-token; --overwrite

Download a blob to a local path.

--account-name; --container-name; --name; --file <local>; --auth-mode login

List every App Service webapp.

--resource-group; --output table

Deploy a built artifact to a webapp (zip deploy).

--src-path <zip>; --type zip; --target-path; --async

Stream container log output to the terminal.

--name; -g; --provider

List every Key Vault in the subscription.

--output table; --resource-type vault

Add or update a secret. Use `--file <path>` to load from a file.

--vault-name; --name; --value; --file; --encoding utf-8

Read a secret's metadata + value.

List every Container Registry.

--resource-group; --output table

Login Docker to an ACR — `docker push/pulling` works directly after.

Manage CLI defaults (output format, default location, default group, ...).

--defaults; --list-defaults

Upgrade the Azure CLI to the latest release (Linux only — on Windows use the installer).

List installed CLI extensions (az aks-preview, az spring, ...).

list; show; add; remove; update

Print HTTP request / response debug info to stderr.

--debug; --only-show-errors