diff --git a/apis/v1alpha1/ack-generate-metadata.yaml b/apis/v1alpha1/ack-generate-metadata.yaml
index 7ce88e4f..16d9859e 100755
--- a/apis/v1alpha1/ack-generate-metadata.yaml
+++ b/apis/v1alpha1/ack-generate-metadata.yaml
@@ -1,8 +1,8 @@
 ack_generate_info:
-  build_date: "2024-01-15T16:33:37Z"
-  build_hash: 3753ca3f6610172e9e652d6e5e62e0a05f2e639c
-  go_version: go1.21.5
-  version: v0.28.0-11-g3753ca3
+  build_date: "2024-01-18T10:01:49Z"
+  build_hash: 7fd3f40fa2160580297ee82914ccdde32312312b
+  go_version: go1.21.6
+  version: v0.28.0-17-g7fd3f40
 api_directory_checksum: 8b27f9e65dbad1f5f825c84d1dbe8fd333baf2a5
 api_version: v1alpha1
 aws_sdk_go_version: v1.44.93
diff --git a/helm/crds/services.k8s.aws_adoptedresources.yaml b/helm/crds/services.k8s.aws_adoptedresources.yaml
index d8d51261..9a12ef7e 100644
--- a/helm/crds/services.k8s.aws_adoptedresources.yaml
+++ b/helm/crds/services.k8s.aws_adoptedresources.yaml
@@ -161,10 +161,10 @@ spec:
                               description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
                               type: string
                             name:
-                              description: 'Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
                               type: string
                             uid:
-                              description: 'UID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids'
+                              description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
                               type: string
                           required:
                           - apiVersion
diff --git a/helm/templates/role-writer.yaml b/helm/templates/role-writer.yaml
index 0f8da895..56bac28f 100644
--- a/helm/templates/role-writer.yaml
+++ b/helm/templates/role-writer.yaml
@@ -10,35 +10,20 @@ rules:
   - ec2.services.k8s.aws
   resources:
   - dhcpoptions
-
   - elasticipaddresses
-
   - flowlogs
-
   - instances
-
   - internetgateways
-
   - natgateways
-
   - networkacls
-
   - routetables
-
   - securitygroups
-
   - subnets
-
   - transitgateways
-
   - vpcs
-
   - vpcendpoints
-
   - vpcendpointserviceconfigurations
-
   - vpcpeeringconnections
-
   verbs:
   - create
   - delete
diff --git a/pkg/resource/security_group/sdk.go b/pkg/resource/security_group/sdk.go
index c19458cb..75cff255 100644
--- a/pkg/resource/security_group/sdk.go
+++ b/pkg/resource/security_group/sdk.go
@@ -226,18 +226,18 @@ func (rm *resourceManager) sdkCreate(
 
 	// Delete the default egress rule
 	if err = rm.deleteDefaultSecurityGroupRule(ctx, &resource{ko}); err != nil {
-		return nil, err
+		return &resource{ko}, err
 	}
 
 	if err = rm.syncSGRules(ctx, &resource{ko}, nil); err != nil {
-		return nil, err
+		return &resource{ko}, err
 	}
 
 	// A ReadOne call for SecurityGroup Rules (NOT SecurityGroups)
 	// is made to refresh Status.Rules with the recently-updated
 	// data from the above `sync` call
 	if rules, err := rm.getRules(ctx, &resource{ko}); err != nil {
-		return nil, err
+		return &resource{ko}, err
 	} else {
 		ko.Status.Rules = rules
 	}
diff --git a/templates/hooks/security_group/sdk_create_post_set_output.go.tpl b/templates/hooks/security_group/sdk_create_post_set_output.go.tpl
index 678f7e98..c978692d 100644
--- a/templates/hooks/security_group/sdk_create_post_set_output.go.tpl
+++ b/templates/hooks/security_group/sdk_create_post_set_output.go.tpl
@@ -5,18 +5,18 @@
 
 	// Delete the default egress rule
 	if err = rm.deleteDefaultSecurityGroupRule(ctx, &resource{ko}); err != nil {
-		return nil, err
+		return &resource{ko}, err
 	}
 
 	if err = rm.syncSGRules(ctx, &resource{ko}, nil); err != nil {
-		return nil, err
+		return &resource{ko}, err
 	}
 
 	// A ReadOne call for SecurityGroup Rules (NOT SecurityGroups)
 	// is made to refresh Status.Rules with the recently-updated
 	// data from the above `sync` call
 	if rules, err := rm.getRules(ctx, &resource{ko}); err != nil {
-		return nil, err
+		return &resource{ko}, err
 	} else {
 		ko.Status.Rules = rules
 	}