What’s the equivalent of this for Pulumi? (From https://docs.aws.amazon.com/eks/latest/userguide/create-service-account-iam-policy-and-role.html)

eksctl create iamserviceaccount \
    --name my-service-account \
    --namespace my-namespace \
    --cluster my-cluster \
    --role-name "my-role-name" \
    --attach-policy-arn arn:aws:iam::111122223333:policy/my-iam-policy \
    --approve \
    --override-existing-serviceaccounts