🐛 aws: scope the Terraform filters to the resource each check reads (#3520)