iam create-role

aws iam create-role \
    --role-name secret-iam-role \
    --assume-role-policy-document '{
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Principal": {
                    "Federated": "arn:aws:iam::214346732473:oidc-provider/oidc.eks.ap-south-1.amazonaws.com/id/DF4D69408C9DE705"
                },
                "Action": "sts:AssumeRoleWithWebIdentity",
                "Condition": {
                    "StringLike": {
                        "oidc.eks.ap-south-1.amazonaws.com/id/DF4D69408C9DE7050D36A:aud": "sts.amazonaws.com",
                        "oidc.eks.ap-south-1.amazonaws.com/id/DF4D69408C9DE7050D36A:sub": "system:serviceaccount:external-secrets:external-secrets-sa"
                    }
                }
            }
        ]
    }'