How to Sync AWS Secrets Manager Secrets into Kubernetes with the External Secrets Operator

If someone asked you how secrets flow from AWS Secrets Manager into a running pod, could you explain it confidently? Storing them is straightforward. But handling rotation, stale env vars, and the gap