:doc:`Greengrass <../../greengrass>` / Client / create_group_certificate_authority

**********************************
create_group_certificate_authority
**********************************



.. py:method:: Greengrass.Client.create_group_certificate_authority(**kwargs)

  Creates a CA for the group. If a CA already exists, it will rotate the existing CA.

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/greengrass-2017-06-07/CreateGroupCertificateAuthority>`_  


  **Request Syntax**
  ::

    response = client.create_group_certificate_authority(
        AmznClientToken='string',
        GroupId='string'
    )
    
  :type AmznClientToken: string
  :param AmznClientToken: A client token used to correlate requests and responses.

  
  :type GroupId: string
  :param GroupId: **[REQUIRED]** The ID of the Greengrass group.

  
  
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {
          'GroupCertificateAuthorityArn': 'string'
      }
      
    **Response Structure**

    

    - *(dict) --* Success. The response body contains the new active CA ARN.
      

      - **GroupCertificateAuthorityArn** *(string) --* The ARN of the group certificate authority.
  
  **Exceptions**
  
  *   :py:class:`Greengrass.Client.exceptions.BadRequestException`

  
  *   :py:class:`Greengrass.Client.exceptions.InternalServerErrorException`

  