diff --git a/examples/kafka/scramsecretassociation.yaml b/examples/kafka/scramsecretassociation.yaml
new file mode 100644
index 0000000000..aa1b138e1f
--- /dev/null
+++ b/examples/kafka/scramsecretassociation.yaml
@@ -0,0 +1,242 @@
+apiVersion: kafka.aws.upbound.io/v1beta1
+kind: ScramSecretAssociation
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    clusterArnSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+    region: us-east-2
+    secretArnSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+
+---
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: example1
+  namespace: upbound-system
+type: Opaque
+stringData:
+  json: '{"username":"uptest1","password":"password"}'
+
+---
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: example2
+  namespace: upbound-system
+type: Opaque
+stringData:
+  json: '{"username":"uptest2","password":"password"}'
+
+---
+
+apiVersion: kms.aws.upbound.io/v1beta1
+kind: Key
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    description: Example Key for MSK Cluster Scram Secret Association
+    region: us-east-2
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: Secret
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example1
+spec:
+  forProvider:
+    kmsKeyIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+    name: AmazonMSK_example1
+    region: us-east-2
+    recoveryWindowInDays: 0
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: Secret
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example2
+spec:
+  forProvider:
+    kmsKeyIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: scram-secret-association
+    name: AmazonMSK_example2
+    region: us-east-2
+    recoveryWindowInDays: 0
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: SecretVersion
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example1
+spec:
+  forProvider:
+    region: us-east-2
+    secretIdRef:
+      name: example1
+    secretStringSecretRef:
+      key: json
+      name: example1
+      namespace: upbound-system
+
+---
+
+apiVersion: secretsmanager.aws.upbound.io/v1beta1
+kind: SecretVersion
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example2
+spec:
+  forProvider:
+    region: us-east-2
+    secretIdRef:
+      name: example2
+    secretStringSecretRef:
+      key: json
+      name: example2
+      namespace: upbound-system
+
+---
+
+apiVersion: kafka.aws.upbound.io/v1beta1
+kind: Cluster
+metadata:
+  annotations:
+    meta.upbound.io/example-id: kafka/v1beta1/scramsecretassociation
+    upjet.upbound.io/manual-intervention: "This resource needs valid Configuration arn and revision."
+  labels:
+    testing.upbound.io/example-name: scram-secret-association
+  name: example
+spec:
+  forProvider:
+    brokerNodeGroupInfo:
+      - clientSubnetsRefs:
+          - name: subnet-az1
+          - name: subnet-az2
+        instanceType: kafka.t3.small
+        securityGroupsRefs:
+          - name: sg
+        storageInfo:
+          - ebsStorageInfo:
+              - volumeSize: 100
+    clientAuthentication:
+      - sasl:
+        - scram: true
+    configurationInfo:
+      - arn: <ARN of the MSK Configuration to use in the cluster>
+        revision: 1
+    clusterName: example
+    kafkaVersion: 2.6.0
+    numberOfBrokerNodes: 2
+    region: us-east-2
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: SecurityGroup
+metadata:
+  labels:
+    testing.upbound.io/example-name: sg
+  name: sg
+spec:
+  forProvider:
+    region: us-east-2
+    vpcIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: vpc
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: Subnet
+metadata:
+  name: subnet-az1
+spec:
+  forProvider:
+    availabilityZone: us-east-2b
+    cidrBlock: 192.168.0.0/24
+    region: us-east-2
+    vpcIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: vpc
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: Subnet
+metadata:
+  name: subnet-az2
+spec:
+  forProvider:
+    availabilityZone: us-east-2c
+    cidrBlock: 192.168.1.0/24
+    region: us-east-2
+    vpcIdSelector:
+      matchLabels:
+        testing.upbound.io/example-name: vpc
+
+---
+
+apiVersion: ec2.aws.upbound.io/v1beta1
+kind: VPC
+metadata:
+  labels:
+    testing.upbound.io/example-name: vpc
+  name: vpc
+spec:
+  forProvider:
+    cidrBlock: 192.168.0.0/22
+    region: us-east-2
+
+
+---
+apiVersion: kafka.aws.upbound.io/v1beta1
+kind: Configuration
+metadata:
+  labels:
+    testing.upbound.io/example-name: example
+  name: example
+spec:
+  forProvider:
+    kafkaVersions:
+      - 2.6.0
+    name: example
+    region: us-east-2
+    serverProperties: |
+      auto.create.topics.enable = true
+      delete.topic.enable = true