feat: enable benchmark on organizational management account

[aq17]

Previously, the organizational example did not create a cloud account and include the management account in the benchmark task scope

[wideawakening]

guess we can hold exposing this variable to the examples

[aq17]

👍🏼

[wideawakening]

doing some maintenance on module so will add the "cft stackset instance" to managed account on diagrams too

[nkraemer-sysdig]

This looks great, thanks @aq17!

[wideawakening]

i was iterating this yesterday and got 409 cloud-account setup conflict over and over again thinking it may be due to other causes, but after properly passing checks on other PR's (with some cleanup).. i'm thinking there may be something wrong with these changes.

been digging on the organizations_organization data and seems like you got it all right, but dunno what's making it fail. could
you give a look see if you spot what's going on?
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/organizations_organization#master-account-attributes-reference

---

some non-critical code review

• per terraform-guideliness, there should only be one local block, positioned on the top of the manifest
• account_ids_to_deploy seems like concat(local.member_account_ids, [data.aws_organizations_organization.org[0].master_account_id])

[aq17]

i was iterating this yesterday and got 409 cloud-account setup conflict over and over again thinking it may be due to other causes, but after properly passing checks on other PR's (with some cleanup).. i'm thinking there may be something wrong with these changes.

been digging on the organizations_organization data and seems like you got it all right, but dunno what's making it fail. could you give a look see if you spot what's going on? https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/organizations_organization#master-account-attributes-reference

some non-critical code review

• per terraform-guideliness, there should only be one local block, positioned on the top of the manifest
• account_ids_to_deploy seems like concat(local.member_account_ids, [data.aws_organizations_organization.org[0].master_account_id])

Is the 409 for all accounts or specifically the master account?

[wideawakening]

fix for tests through the provider running smoothly
thx for the work @aq17!