fix: Add AWS account ID validation and debug info for GitHub Secrets

- Add validation to ensure AWS account ID is properly retrieved
- Add debug information showing the exact ARN being registered
- Improve error handling for AWS account ID retrieval
- Add manual setup instructions when GitHub Secrets registration fails
- Fix potential issue where account ID might be missing from ARN

Author: Hirose-Sebastian-Taikai

create_role.ps1

@@ -917,6 +917,12 @@ if (-not $GITHUB_CLI_WORKING) {
 # 6. AWSアカウントIDの取得
 Write-Info "AWSアカウントIDの取得中..."
 $AWS_ACCOUNT_ID = aws sts get-caller-identity --query Account --output text 2>$null
+if (-not $AWS_ACCOUNT_ID -or $AWS_ACCOUNT_ID -eq "None") {
+    Write-Error "AWSアカウントIDの取得に失敗しました"
+    Write-Info "AWS認証情報を確認してください"
+    aws sts get-caller-identity
+    exit 1
+}
 Write-Success "AWSアカウントID: $AWS_ACCOUNT_ID"
 
 # AWSリージョンの確認

create_role.sh

@@ -941,6 +941,12 @@ fi
 # 6. AWSアカウントIDの取得
 print_info "AWSアカウントIDの取得中..."
 AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)
+if [ -z "$AWS_ACCOUNT_ID" ] || [ "$AWS_ACCOUNT_ID" = "None" ]; then
+    print_error "AWSアカウントIDの取得に失敗しました"
+    print_info "AWS認証情報を確認してください"
+    aws sts get-caller-identity
+    exit 1
+fi
 print_success "AWSアカウントID: $AWS_ACCOUNT_ID"
 
 # AWSリージョンの確認
@@ -1148,10 +1154,14 @@ if [ "$GITHUB_CLI_AVAILABLE" = true ]; then
 
         # 環境別AWS_ROLE_ARNの登録
         AWS_ROLE_ARN="arn:aws:iam::$AWS_ACCOUNT_ID:role/$ROLE_NAME"
+        print_info "登録するARN: $AWS_ROLE_ARN"
         if gh secret set "$SECRET_NAME" --body "$AWS_ROLE_ARN" &> /dev/null; then
             print_success "$SECRET_NAMEがRepository Secretsに登録されました"
         else
             print_warning "$SECRET_NAMEの登録に失敗しました"
+            print_info "手動でGitHub Secretsに設定してください:"
+            print_info "Name: $SECRET_NAME"
+            print_info "Value: $AWS_ROLE_ARN"
         fi
 
     # S3_BUCKETの登録