In the last community meeting, there was a point about "hey we should flex that recent filter_resources fix in tests and compile its jmespath expressions" - that was a fair point. https://github.com/cloud-custodian/cloud-custodian/pull/10775 does that. I've also made a drive-by tweak to the awscc data build step because that recently started failing in CI (I think it had been working by accident for a while).