@davidpellerin/accountfactory/src/clients/stsService.js

AWS Organizations setup and management tool for creating and managing multi-account setups

import { GetCallerIdentityCommand } from '@aws-sdk/client-sts';
import { logger } from '../utils/logger.js';

export class STSService {
  constructor(stsClient, injectedLogger = logger) {
    if (!stsClient) {
      throw new Error('STSClient is required');
    }
    this.stsClient = stsClient;
    this.logger = injectedLogger;
    this.logger.debug('STSService initialized with all required dependencies');
  }

  async getCallerIdentity() {
    try {
      const getCallerIdentityCommand = new GetCallerIdentityCommand({});
      const response = await this.stsClient.send(getCallerIdentityCommand);

      if (!response.Account) {
        throw new Error('Failed to retrieve AWS account ID. Please check your AWS credentials.');
      }

      if (response.Arn.endsWith(':root')) {
        this.logger.warning('Warning: Running as root user. Consider using an IAM user instead.');
      }

      this.logger.info(`AWS account ID: ${response.Account}`);
      return response;
    } catch (error) {
      this.logger.error(`Failed to get caller identity: ${error.message}`);
      throw error;
    }
  }
}