clause to only do aws when credentials exist and note to re-organise
added check for secret to stop vagrant failures