def get_missing_vars(aws):
    """
    return a list of missing required env vars if any
    """
    required = ["AWS_SECRETS_NAME", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY"]
    return [f'Missing env variable "{v}"' for v in required if aws.get(v, None) is None]