Account Context Module Improved and Enabled by Default

[gabrielsoltz]

• The account context module was using decribe_account as the way to understand if the account was part of an AWS organization. This API can be called only from the organization’s management account or by a member account that is a delegated administrator, so it was showing False when the account was not part of an organization but also when the account was not master or a delegated administrator.
• Now, the module relies on describe_organization, which can be called from any account.
• We added an extra section, Details, that is only called when the account is master or a delegated administrator, adding more details like the Parent, the OU, and the policies for the organizations and their targets.
• Now that this is sorted out, the module is enabled by default, as it can be called from any account. It can be disabled using the --context option