diff --git a/apis/ec2/v1beta1/zz_generated.deepcopy.go b/apis/ec2/v1beta1/zz_generated.deepcopy.go
index 73b092130d..64d729558f 100644
--- a/apis/ec2/v1beta1/zz_generated.deepcopy.go
+++ b/apis/ec2/v1beta1/zz_generated.deepcopy.go
@@ -695,6 +695,46 @@ func (in *PrefixListID) DeepCopy() *PrefixListID {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *ReferencedSecurityGroup) DeepCopyInto(out *ReferencedSecurityGroup) {
+	*out = *in
+	if in.GroupId != nil {
+		in, out := &in.GroupId, &out.GroupId
+		*out = new(string)
+		**out = **in
+	}
+	if in.PeeringStatus != nil {
+		in, out := &in.PeeringStatus, &out.PeeringStatus
+		*out = new(string)
+		**out = **in
+	}
+	if in.UserId != nil {
+		in, out := &in.UserId, &out.UserId
+		*out = new(string)
+		**out = **in
+	}
+	if in.VpcId != nil {
+		in, out := &in.VpcId, &out.VpcId
+		*out = new(string)
+		**out = **in
+	}
+	if in.VpcPeeringConnectionId != nil {
+		in, out := &in.VpcPeeringConnectionId, &out.VpcPeeringConnectionId
+		*out = new(string)
+		**out = **in
+	}
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ReferencedSecurityGroup.
+func (in *ReferencedSecurityGroup) DeepCopy() *ReferencedSecurityGroup {
+	if in == nil {
+		return nil
+	}
+	out := new(ReferencedSecurityGroup)
+	in.DeepCopyInto(out)
+	return out
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *RouteBeta) DeepCopyInto(out *RouteBeta) {
 	*out = *in
@@ -1144,6 +1184,26 @@ func (in *SecurityGroupRuleObservation) DeepCopyInto(out *SecurityGroupRuleObser
 		*out = new(string)
 		**out = **in
 	}
+	if in.FromPort != nil {
+		in, out := &in.FromPort, &out.FromPort
+		*out = new(int32)
+		**out = **in
+	}
+	if in.PrefixListId != nil {
+		in, out := &in.PrefixListId, &out.PrefixListId
+		*out = new(string)
+		**out = **in
+	}
+	if in.ReferencedGroupInfo != nil {
+		in, out := &in.ReferencedGroupInfo, &out.ReferencedGroupInfo
+		*out = new(ReferencedSecurityGroup)
+		(*in).DeepCopyInto(*out)
+	}
+	if in.ToPort != nil {
+		in, out := &in.ToPort, &out.ToPort
+		*out = new(int32)
+		**out = **in
+	}
 }
 
 // DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SecurityGroupRuleObservation.
diff --git a/package/crds/ec2.aws.crossplane.io_securitygroups.yaml b/package/crds/ec2.aws.crossplane.io_securitygroups.yaml
index c6ffbfa20f..60c5aa632a 100644
--- a/package/crds/ec2.aws.crossplane.io_securitygroups.yaml
+++ b/package/crds/ec2.aws.crossplane.io_securitygroups.yaml
@@ -978,6 +978,13 @@ spec:
                         description:
                           description: Description of this rule.
                           type: string
+                        fromPort:
+                          description: The start of port range for the TCP and UDP
+                            protocols, or an ICMP/ICMPv6 type. A value of -1 indicates
+                            all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6
+                            types, you must specify all codes.
+                          format: int32
+                          type: integer
                         id:
                           description: ID of the security group rule.
                           type: string
@@ -986,6 +993,37 @@ spec:
                             or number (see Protocol Numbers (http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)).
                             Use -1 to specify all protocols.
                           type: string
+                        prefixListId:
+                          description: The ID of the prefix list.
+                          type: string
+                        referencedGroupInfo:
+                          description: Describes the security group that is referenced
+                            in the rule.
+                          properties:
+                            groupId:
+                              description: The ID of the security group.
+                              type: string
+                            peeringStatus:
+                              description: The status of a VPC peering connection,
+                                if applicable.
+                              type: string
+                            userId:
+                              description: The Amazon Web Services account ID.
+                              type: string
+                            vpcId:
+                              description: The ID of the VPC.
+                              type: string
+                            vpcPeeringConnectionId:
+                              description: The ID of the VPC peering connection.
+                              type: string
+                          type: object
+                        toPort:
+                          description: The end of port range for the TCP and UDP protocols,
+                            or an ICMP/ICMPv6 code. A value of -1 indicates all ICMP/ICMPv6
+                            codes. If you specify all ICMP/ICMPv6 types, you must
+                            specify all codes.
+                          format: int32
+                          type: integer
                       type: object
                     type: array
                   ingressRules:
@@ -1001,6 +1039,13 @@ spec:
                         description:
                           description: Description of this rule.
                           type: string
+                        fromPort:
+                          description: The start of port range for the TCP and UDP
+                            protocols, or an ICMP/ICMPv6 type. A value of -1 indicates
+                            all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6
+                            types, you must specify all codes.
+                          format: int32
+                          type: integer
                         id:
                           description: ID of the security group rule.
                           type: string
@@ -1009,6 +1054,37 @@ spec:
                             or number (see Protocol Numbers (http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)).
                             Use -1 to specify all protocols.
                           type: string
+                        prefixListId:
+                          description: The ID of the prefix list.
+                          type: string
+                        referencedGroupInfo:
+                          description: Describes the security group that is referenced
+                            in the rule.
+                          properties:
+                            groupId:
+                              description: The ID of the security group.
+                              type: string
+                            peeringStatus:
+                              description: The status of a VPC peering connection,
+                                if applicable.
+                              type: string
+                            userId:
+                              description: The Amazon Web Services account ID.
+                              type: string
+                            vpcId:
+                              description: The ID of the VPC.
+                              type: string
+                            vpcPeeringConnectionId:
+                              description: The ID of the VPC peering connection.
+                              type: string
+                          type: object
+                        toPort:
+                          description: The end of port range for the TCP and UDP protocols,
+                            or an ICMP/ICMPv6 code. A value of -1 indicates all ICMP/ICMPv6
+                            codes. If you specify all ICMP/ICMPv6 types, you must
+                            specify all codes.
+                          format: int32
+                          type: integer
                       type: object
                     type: array
                   ownerId: