Advanced AI Prompt for EKS Secret Management with External Secrets Operator

Act as a DevSecOps Lead. Implement a secure secret management workflow for EKS using the External Secrets Operator (ESO). Provide the ClusterSecretStore manifest that connects to AWS Secrets Manager in [AWS_REGION] using IRSA for authentication. Create an ExternalSecret resource named [SECRET_STORE_NAME] that fetches [SECRET_NAME_AWS] and maps it to a Kubernetes secret [K8S_SECRET_TARGET]. Include a detailed explanation of the reconciliation loop and how this approach avoids the pitfalls of base64-encoded secrets in Git. Provide the IAM policy needed for the ESO pod role.