GetBaseDomain returns a base domain chosen from among the account's public routes.

GetPublicZone returns a public route53 zone that matches the name.

GetSession returns an AWS session by checking credentials and, if no creds are found, asks for them and stores them on disk in a config file.

IsForbidden returns true if and only if the input error is an HTTP 403 error from the AWS API.

Platform collects AWS-specific configuration.

ValidateCreds will try to create an AWS session, and also verify that the current credentials are sufficient to perform an installation, and that they can be used for cluster runtime as either capable of creating new credentials for components that interact with the cloud or being able to be passed through as-is to the components that need cloud credentials.