Need help on finalizing code to get all accounts from an ogranization? code example included

[codelinx]

Hi all. Thanks in advance for any help on this.

What i want to accomplish:

• built an api or service in go that can get all the accounts in my companies aws account(s)

how i would like to accomplish this:

• using aws go sdk v2

Current implementation:

• i know how to write the code to accomplish my goal on my local machine to grab all the accounts because it will use my user access and the SSO to get the account info

Current issues:

• i am not understanding how to implement a way to let the code know where to go and I am confused as to how to get the code to point to my org. I know if i run the code it will grab my credentials and login to the SAML/SSO url, but i do not know how to do this from an api/service within aws via a service running on EC2, a k8s service or a lambda.

code that i have tried/used:

func ListAWSAccounts(ctx context.Context, cfg aws.Config) ([]string, error) {
	svc := organizations.NewFromConfig(cfg)

	params := &organizations.ListAccountsInput{}
	output, err := svc.ListAccounts(ctx, params)
	if err != nil {
		return nil, err
	}

	var accounts []string
	for _, account := range output.Accounts {
		accounts = append(accounts, *account.Id)
    slog.Default().Info("Account ID: %s", aws.ToString(account.Id))

	}

	return accounts, nil
}

what am i missing?

• A role in aws? eg. assumeRole function with policy to list accounts? after reading he docs for list accounts i would need an elevated admin privileges.
• Credentials provider or similar that has the URL as an option?