diff --git a/examples/kafka/scramsecretassociation.yaml b/examples/kafka/scramsecretassociation.yaml
new file mode 100644
index 0000000000..ad9166fc0a
--- /dev/null
+++ b/examples/kafka/scramsecretassociation.yaml
@@ -0,0 +1,176 @@
+apiVersion: kafka.aws.upbound.io/v1beta1
+kind: ScramSecretAssociation
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    clusterArnSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+    region: us-east-2
+    secretArnRefs:
+    - name: example
+
+---
+
+apiVersion: kms.aws.upbound.io/v1beta1
+kind: Key
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    description: Example Key for MSK Cluster Scram Secret Association
+    region: us-east-2
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: Secret
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    kmsKeyIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+    name: AmazonMSK_example
+    region: us-east-2
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: SecretPolicy
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    policy: ${data.aws_iam_policy_document.example.json}
+    region: us-east-2
+    secretArnSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: SecretVersion
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    region: us-east-2
+    secretIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+    secretStringSecretRef:
+      key: example-key
+      name: example-secret
+      namespace: upbound-system
+
+---
+
+apiVersion: kafka.aws.upbound.io/v1beta1
+kind: Cluster
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    brokerNodeGroupInfo:
+      - clientSubnetsRefs:
+          - name: subnet-az1
+          - name: subnet-az2
+        instanceType: kafka.t3.small
+        securityGroupsRefs:
+          - name: sg
+        storageInfo:
+          - ebsStorageInfo:
+              - volumeSize: 100
+    clientAuthentication:
+      - sasl:
+        - scram: true
+    clusterName: example
+    kafkaVersion: 2.6.0
+    numberOfBrokerNodes: 2
+    region: us-east-2
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: SecurityGroup
+metadata:
+  labels:
+    testing.upbound.io/example-name: sg
+  name: sg
+spec:
+  forProvider:
+    region: us-east-2
+    vpcIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: vpc
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: Subnet
+metadata:
+  name: subnet-az1
+spec:
+  forProvider:
+    availabilityZone: us-east-2b
+    cidrBlock: 192.168.0.0/24
+    region: us-east-2
+    vpcIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: vpc
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: Subnet
+metadata:
+  name: subnet-az2
+spec:
+  forProvider:
+    availabilityZone: us-east-2c
+    cidrBlock: 192.168.1.0/24
+    region: us-east-2
+    vpcIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: vpc
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: VPC
+metadata:
+  labels:
+    testing.upbound.io/example-name: vpc
+  name: vpc
+spec:
+  forProvider:
+    cidrBlock: 192.168.0.0/22
+    region: us-east-2