Update to ACK runtime v0.47.0, code-generator v0.47.1 (#139)

### Update to ACK runtime `v0.47.0`, code-generator `v0.47.1`

----------

* ACK code-generator `v0.47.1` [release notes](https://github.com/aws-controllers-k8s/code-generator/releases/tag/v0.47.1)
* ACK runtime `v0.47.0` [release notes](https://github.com/aws-controllers-k8s/runtime/releases/tag/v0.47.0)

----------

NOTE:
This PR increments the release version of service controller from `v1.3.21` to `v1.3.22`

Once this PR is merged, release `v1.3.22` will be automatically created for `iam-controller`

**Please close this PR, if you do not want the new patch release for `iam-controller`**

----------

#### stdout for `make build-controller`:

```
building ack-generate ... ok.
==== building iam-controller ====
Copying common custom resource definitions into iam
Building Kubernetes API objects for iam
Generating deepcopy code for iam
Generating custom resource definitions for iam
Building service controller for iam
Running GO mod tidy
Generating RBAC manifests for iam
Running gofmt against generated code for iam
Updating additional GitHub repository maintenance files
==== building iam-controller release artifacts ====
Building release artifacts for iam-v1.3.22
Generating common custom resource definitions
Generating custom resource definitions for iam
Generating RBAC manifests for iam
```

----------

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: ack-bot

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,9 +1,9 @@
 ack_generate_info:
-  build_date: "2025-05-13T05:08:01Z"
-  build_hash: 55bf57b2806c33a7fcd074be403f26ce3f8e58db
+  build_date: "2025-05-24T00:20:59Z"
+  build_hash: 66a58d259146834e61b211a9a01609beaa58ef77
   go_version: go1.24.2
-  version: v0.46.2
-api_directory_checksum: 7e1c19231d3275a1147157f6943a7391953f7001
+  version: v0.47.1
+api_directory_checksum: 0791ed331a435043f515ff3beb1387626883f04d
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6
 generator_config_info:

apis/v1alpha1/group.go

@@ -6,4 +6,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: public.ecr.aws/aws-controllers-k8s/iam-controller
-  newTag: 1.3.21
+  newTag: 1.3.22

apis/v1alpha1/instance_profile.go

@@ -61,6 +61,8 @@ spec:
                   IAM user, group, role, and policy names must be unique within the account.
                   Names are not distinguished by case. For example, you cannot create resources
                   named both "MyResource" and "myresource".
+
+                  Regex Pattern: `^[\w+=,.@-]+$`
                 type: string
               path:
                 description: |-
@@ -77,6 +79,8 @@ spec:
                   can contain any ASCII character from the ! (\u0021) through the DEL character
                   (\u007F), including most punctuation characters, digits, and upper and lowercased
                   letters.
+
+                  Regex Pattern: `^(\u002F)|(\u002F[\u0021-\u007E]+\u002F)$`
                 type: string
               policies:
                 items:
@@ -182,6 +186,8 @@ spec:
                   The stable and unique string identifying the group. For more information
                   about IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
+
+                  Regex Pattern: `^[\w]+$`
                 type: string
             type: object
         type: object

apis/v1alpha1/policy.go

@@ -59,6 +59,8 @@ spec:
                   This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
                   a string of characters consisting of upper and lowercase alphanumeric characters
                   with no spaces. You can also include any of the following characters: _+=,.@-
+
+                  Regex Pattern: `^[\w+=,.@-]+$`
                 type: string
               path:
                 description: |-
@@ -75,6 +77,8 @@ spec:
                   can contain any ASCII character from the ! (\u0021) through the DEL character
                   (\u007F), including most punctuation characters, digits, and upper and lowercased
                   letters.
+
+                  Regex Pattern: `^(\u002F)|(\u002F[\u0021-\u007E]+\u002F)$`
                 type: string
                 x-kubernetes-validations:
                 - message: Value is immutable once set
@@ -199,6 +203,8 @@ spec:
                   The stable and unique string identifying the instance profile. For more information
                   about IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
+
+                  Regex Pattern: `^[\w]+$`
                 type: string
             type: object
         type: object

apis/v1alpha1/role.go

@@ -66,6 +66,8 @@ spec:
                   IAM user, group, role, and policy names must be unique within the account.
                   Names are not distinguished by case. For example, you cannot create resources
                   named both "MyResource" and "myresource".
+
+                  Regex Pattern: `^[\w+=,.@-]+$`
                 type: string
               path:
                 description: |-
@@ -85,6 +87,8 @@ spec:
                   letters.
 
                   You cannot use an asterisk (*) in the path name.
+
+                  Regex Pattern: `^((/[A-Za-z0-9\.,\+@=_-]+)*)/$`
                 type: string
               policyDocument:
                 description: |-
@@ -116,6 +120,8 @@ spec:
 
                      * The special characters tab (\u0009), line feed (\u000A), and carriage
                      return (\u000D)
+
+                  Regex Pattern: `^[\u0009\u000A\u000D\u0020-\u00FF]+$`
                 type: string
               tags:
                 description: |-
@@ -223,8 +229,10 @@ spec:
                 format: date-time
                 type: string
               defaultVersionID:
-                description: The identifier for the version of the policy that is
-                  set as the default version.
+                description: |-
+                  The identifier for the version of the policy that is set as the default version.
+
+                  Regex Pattern: `^v[1-9][0-9]*(\.[A-Za-z0-9-]*)?$`
                 type: string
               isAttachable:
                 description: Specifies whether the policy can be attached to an IAM
@@ -246,6 +254,8 @@ spec:
 
                   For more information about IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
+
+                  Regex Pattern: `^[\w]+$`
                 type: string
               updateDate:
                 description: |-

apis/v1alpha1/user.go

@@ -66,9 +66,14 @@ spec:
                      return (\u000D)
 
                   Upon success, the response includes the same trust policy in JSON format.
+
+                  Regex Pattern: `^[\u0009\u000A\u000D\u0020-\u00FF]+$`
                 type: string
               description:
-                description: A description of the role.
+                description: |-
+                  A description of the role.
+
+                  Regex Pattern: `^[\u0009\u000A\u000D\u0020-\u007E\u00A1-\u00FF]*$`
                 type: string
               inlinePolicies:
                 additionalProperties:
@@ -103,6 +108,8 @@ spec:
                   This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
                   a string of characters consisting of upper and lowercase alphanumeric characters
                   with no spaces. You can also include any of the following characters: _+=,.@-
+
+                  Regex Pattern: `^[\w+=,.@-]+$`
                 type: string
               path:
                 description: |-
@@ -119,6 +126,8 @@ spec:
                   can contain any ASCII character from the ! (\u0021) through the DEL character
                   (\u007F), including most punctuation characters, digits, and upper and lowercased
                   letters.
+
+                  Regex Pattern: `^(\u002F)|(\u002F[\u0021-\u007E]+\u002F)$`
                 type: string
               permissionsBoundary:
                 description: |-
@@ -279,6 +288,8 @@ spec:
                   The stable and unique string identifying the role. For more information about
                   IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
+
+                  Regex Pattern: `^[\w]+$`
                 type: string
               roleLastUsed:
                 description: |-

config/controller/kustomization.yaml

@@ -61,6 +61,8 @@ spec:
                   IAM user, group, role, and policy names must be unique within the account.
                   Names are not distinguished by case. For example, you cannot create resources
                   named both "MyResource" and "myresource".
+
+                  Regex Pattern: `^[\w+=,.@-]+$`
                 type: string
               path:
                 description: |-
@@ -77,6 +79,8 @@ spec:
                   can contain any ASCII character from the ! (\u0021) through the DEL character
                   (\u007F), including most punctuation characters, digits, and upper and lowercased
                   letters.
+
+                  Regex Pattern: `^(\u002F)|(\u002F[\u0021-\u007E]+\u002F)$`
                 type: string
               permissionsBoundary:
                 description: |-
@@ -259,6 +263,8 @@ spec:
                   The stable and unique string identifying the user. For more information about
                   IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
+
+                  Regex Pattern: `^[\w]+$`
                 type: string
             type: object
         type: object

config/crd/bases/iam.services.k8s.aws_groups.yaml

@@ -5,7 +5,7 @@ go 1.24.0
 toolchain go1.24.1
 
 require (
-	github.com/aws-controllers-k8s/runtime v0.46.1
+	github.com/aws-controllers-k8s/runtime v0.47.0
 	github.com/aws/aws-sdk-go v1.49.0
 	github.com/aws/aws-sdk-go-v2 v1.34.0
 	github.com/aws/aws-sdk-go-v2/service/iam v1.38.8

config/crd/bases/iam.services.k8s.aws_instanceprofiles.yaml

@@ -1,7 +1,7 @@
 github.com/a-hilaly/aws-iam-policy v0.0.0-20231121054900-2c56e839ca53 h1:2uNM0nR2WUDN88EYFxjEaroH+PZJ6k/h9kl+KO0dWVc=
 github.com/a-hilaly/aws-iam-policy v0.0.0-20231121054900-2c56e839ca53/go.mod h1:Ojgst9ZFn+VEEJpqtuw/LxVGqEf2+hwWBlkYWvF/XWM=
-github.com/aws-controllers-k8s/runtime v0.46.1 h1:61RU6uYiFSp0cDhv52vAmaPzrebzoudtsp1fGkk6iLk=
-github.com/aws-controllers-k8s/runtime v0.46.1/go.mod h1:G2UMBKA7qgXG4JV16NTIUp715uqvUEvWaa7TG1I527U=
+github.com/aws-controllers-k8s/runtime v0.47.0 h1:pWzMLrwAFrAmMuSukYDLrQp5Yw594w1ke6XWGmI3uyo=
+github.com/aws-controllers-k8s/runtime v0.47.0/go.mod h1:G2UMBKA7qgXG4JV16NTIUp715uqvUEvWaa7TG1I527U=
 github.com/aws/aws-sdk-go v1.49.0 h1:g9BkW1fo9GqKfwg2+zCD+TW/D36Ux+vtfJ8guF4AYmY=
 github.com/aws/aws-sdk-go v1.49.0/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v1.34.0 h1:9iyL+cjifckRGEVpRKZP3eIxVlL06Qk1Tk13vreaVQU=

config/crd/bases/iam.services.k8s.aws_policies.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 name: iam-chart
 description: A Helm chart for the ACK service controller for AWS Identity & Access Management (IAM)
-version: 1.3.21
-appVersion: 1.3.21
+version: 1.3.22
+appVersion: 1.3.22
 home: https://github.com/aws-controllers-k8s/iam-controller
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
 sources: