Method GetAccountID

internal/aws/clients.go:137–183

GetAccountID returns the AWS account ID, caching the result

(ctx context.Context)

// GetAccountID returns the AWS account ID, caching the result
func (f *ClientFactory) GetAccountID(ctx context.Context) (string, error) {
	f.mu.RLock()
	if f.accountID != "" {
		accountID := f.accountID
		f.mu.RUnlock()
		return accountID, nil
	}
	f.mu.RUnlock()
	
	f.mu.Lock()
	defer f.mu.Unlock()
	
	// Double-check after acquiring write lock
	if f.accountID != "" {
		return f.accountID, nil
	}
	
	stsClient := sts.New(f.session)
	input := &sts.GetCallerIdentityInput{}
	
	result, err := stsClient.GetCallerIdentityWithContext(ctx, input)
	if err != nil {
		// Check for common AWS credential errors
		if awsErr, ok := err.(awserr.Error); ok {
			switch awsErr.Code() {
			case "NoCredentialsErr":
				return "", fmt.Errorf("AWS credentials not found. Please run 'aws configure' or set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY environment variables")
			case "TokenRefreshRequired":
				return "", fmt.Errorf("AWS credentials have expired. Please refresh your credentials or run 'aws sso login' if using SSO")
			case "UnauthorizedOperation":
				return "", fmt.Errorf("AWS credentials lack necessary permissions. Ensure your AWS user/role has CloudFormation, Lambda, and S3 permissions")
			case "InvalidUserID.NotFound":
				return "", fmt.Errorf("AWS credentials are invalid. Please check your AWS access key and secret key")
			default:
				return "", fmt.Errorf("AWS credential validation failed (%s): %v\n\n🔧 Troubleshooting:\n- Verify AWS credentials: aws sts get-caller-identity\n- Check region setting: %s", awsErr.Code(), awsErr.Message(), *f.session.Config.Region)
			}
		}
		return "", fmt.Errorf("failed to validate AWS credentials: %w\n\n💡 Please check your AWS configuration", err)
	}
	
	if result.Account == nil {
		return "", fmt.Errorf("account ID not found in caller identity")
	}
	
	f.accountID = *result.Account
	return f.accountID, nil
}

// ValidateCredentials checks if AWS credentials are valid
func (f *ClientFactory) ValidateCredentials(ctx context.Context) error {