def validate_master_id(org_client, spec):
    """
    Don't mangle the wrong org by accident
    """
    master_account_id = org_client.describe_organization()['Organization'][
        'MasterAccountId']
    if master_account_id != spec['master_account_id']:
        errmsg = (
            "The Organization Master Account Id '%s' does not match the 'master_account_id' set in the spec-file"
             % master_account_id)
        raise RuntimeError(errmsg)
    return
