aws sts get-caller-identity will always work even if you have no credentials for anything else.

THIS_ACCOUNT=$(aws sts get-caller-identity --query Account --output text)