vault
vault copied to clipboard
pass nil function when no externalID (this matches old functionality)
Pass a nil function when the externalID is empty.
This fixes an issue where AWS would reject a blank externalID as too short, presumably because we were passing a non-nil value.