create ro group via AWS API