🐛 okta: scope the Terraform filters to the resource each check reads (#3518)