Advanced AI Prompt for EKS Secret Management with External Secrets Operator

Act as a Kubernetes DevSecOps Lead. Implement a highly secure secret management workflow for EKS completely divorcing plain-text secrets from the Git repository using the External Secrets Operator (ESO). Provide the `ClusterSecretStore` YAML manifest establishing an IRSA-authenticated connection to AWS Secrets Manager within the [AWS_REGION]. Create the `ExternalSecret` custom resource named [SECRET_STORE_NAME] that programmatically fetches the payload of [SECRET_NAME_AWS] and projects it securely into the cluster as a native `Opaque` Kubernetes secret named [K8S_SECRET_TARGET]. Define an aggressive `refreshInterval` to enforce automated secret rotation synchronization. Provide the precise AWS IAM policy JSON required by the ESO controller pod to execute `secretsmanager:GetSecretValue`.