diff --git a/apis/opensearchserverless/v1beta1/zz_generated.conversion_spokes.go b/apis/opensearchserverless/v1beta1/zz_generated.conversion_spokes.go
deleted file mode 100755
index 02d2057ba6..0000000000
--- a/apis/opensearchserverless/v1beta1/zz_generated.conversion_spokes.go
+++ /dev/null
@@ -1,34 +0,0 @@
-// SPDX-FileCopyrightText: 2024 The Crossplane Authors <https://crossplane.io>
-//
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by upjet. DO NOT EDIT.
-
-package v1beta1
-
-import (
-	ujconversion "github.com/crossplane/upjet/pkg/controller/conversion"
-	"github.com/crossplane/upjet/pkg/resource"
-	"github.com/pkg/errors"
-	"sigs.k8s.io/controller-runtime/pkg/conversion"
-)
-
-// ConvertTo converts this SecurityConfig to the hub type.
-func (tr *SecurityConfig) ConvertTo(dstRaw conversion.Hub) error {
-	spokeVersion := tr.GetObjectKind().GroupVersionKind().Version
-	hubVersion := dstRaw.GetObjectKind().GroupVersionKind().Version
-	if err := ujconversion.RoundTrip(dstRaw.(resource.Terraformed), tr); err != nil {
-		return errors.Wrapf(err, "cannot convert from the spoke version %q to the hub version %q", spokeVersion, hubVersion)
-	}
-	return nil
-}
-
-// ConvertFrom converts from the hub type to the SecurityConfig type.
-func (tr *SecurityConfig) ConvertFrom(srcRaw conversion.Hub) error {
-	spokeVersion := tr.GetObjectKind().GroupVersionKind().Version
-	hubVersion := srcRaw.GetObjectKind().GroupVersionKind().Version
-	if err := ujconversion.RoundTrip(tr, srcRaw.(resource.Terraformed)); err != nil {
-		return errors.Wrapf(err, "cannot convert from the hub version %q to the spoke version %q", hubVersion, spokeVersion)
-	}
-	return nil
-}
diff --git a/examples/cloudfront/v1beta2/fieldlevelencryptionconfig.yaml b/examples/cloudfront/v1beta2/fieldlevelencryptionconfig.yaml
index a7cb8dd9a5..d3541aeeff 100644
--- a/examples/cloudfront/v1beta2/fieldlevelencryptionconfig.yaml
+++ b/examples/cloudfront/v1beta2/fieldlevelencryptionconfig.yaml
@@ -5,9 +5,11 @@
 apiVersion: cloudfront.aws.upbound.io/v1beta2
 kind: FieldLevelEncryptionConfig
 metadata:
-  name: example-field-level-encryption-config
+  annotations:
+    meta.upbound.io/example-id: cloudfront/v1beta2/fieldlevelencryptionconfig
   labels:
-    testing.upbound.io/example-name: publickey
+    testing.upbound.io/example-name: example-field-level-encryption-config
+  name: example-field-level-encryption-config
 spec:
   forProvider:
     region: us-west-1
@@ -24,7 +26,7 @@ spec:
         items:
           - profileIdSelector:
               matchLabels:
-                testing.upbound.io/example-name: publickey
+                testing.upbound.io/example-name: example-field-level-encryption-config
             queryArg: Arg1
 
 ---
@@ -32,9 +34,11 @@ spec:
 apiVersion: cloudfront.aws.upbound.io/v1beta2
 kind: FieldLevelEncryptionProfile
 metadata:
+  annotations:
+    meta.upbound.io/example-id: cloudfront/v1beta2/fieldlevelencryptionconfig
   name: example-field-level-encryption-profile
   labels:
-    testing.upbound.io/example-name: publickey
+    testing.upbound.io/example-name: example-field-level-encryption-config
 spec:
   forProvider:
     region: us-west-1
@@ -42,12 +46,12 @@ spec:
     encryptionEntities:
       items:
         - fieldPatterns:
-            - items:
-                - DateOfBirth
+            items:
+              - DateOfBirth
           providerId: testprovider
           publicKeyIdSelector:
             matchLabels:
-              testing.upbound.io/example-name: publickey
+              testing.upbound.io/example-name: example-field-level-encryption-config
     name: ${Rand.RFC1123Subdomain}
 
 ---
@@ -55,9 +59,11 @@ spec:
 apiVersion: cloudfront.aws.upbound.io/v1beta1
 kind: PublicKey
 metadata:
-  name: example-public-key
+  annotations:
+    meta.upbound.io/example-id: cloudfront/v1beta2/fieldlevelencryptionconfig
   labels:
-    testing.upbound.io/example-name: publickey
+    testing.upbound.io/example-name: example-field-level-encryption-config
+  name: example-public-key-config
 spec:
   forProvider:
     region: us-west-1
@@ -66,7 +72,7 @@ spec:
       name: publickeysecret
       namespace: upbound-system
       key: publickeyPEM
-    name: test_key
+    name: test_key2
 
 ---
 
diff --git a/examples/cloudfront/v1beta2/fieldlevelencryptionprofile.yaml b/examples/cloudfront/v1beta2/fieldlevelencryptionprofile.yaml
index 826fc082c0..5c328fef8f 100644
--- a/examples/cloudfront/v1beta2/fieldlevelencryptionprofile.yaml
+++ b/examples/cloudfront/v1beta2/fieldlevelencryptionprofile.yaml
@@ -5,9 +5,11 @@
 apiVersion: cloudfront.aws.upbound.io/v1beta2
 kind: FieldLevelEncryptionProfile
 metadata:
-  name: example-field-level-encryption-profile
+  annotations:
+    meta.upbound.io/example-id: cloudfront/v1beta2/fieldlevelencryptionprofile
   labels:
-    testing.upbound.io/example-name: publickey
+    testing.upbound.io/example-name: example-field-level-encryption-profile
+  name: example-field-level-encryption-profile
 spec:
   forProvider:
     region: us-west-1
@@ -15,12 +17,12 @@ spec:
     encryptionEntities:
       items:
       - fieldPatterns:
-          - items:
-              - DateOfBirth
+          items:
+            - DateOfBirth
         providerId: testprovider
         publicKeyIdSelector:
           matchLabels:
-            testing.upbound.io/example-name: publickey
+            testing.upbound.io/example-name: example-field-level-encryption-profile
     name: ${Rand.RFC1123Subdomain}
 
 ---
@@ -28,9 +30,11 @@ spec:
 apiVersion: cloudfront.aws.upbound.io/v1beta1
 kind: PublicKey
 metadata:
-  name: example-public-key
+  annotations:
+    meta.upbound.io/example-id: cloudfront/v1beta2/fieldlevelencryptionprofile
   labels:
-    testing.upbound.io/example-name: publickey
+    testing.upbound.io/example-name: example-field-level-encryption-profile
+  name: example-public-key-prof
 spec:
   forProvider:
     region: us-west-1