Local LLMs for real HPC work, Part II: writing complex real-world AWS IAM policies

Local LLMs for real HPC work — a series Part I: Two Macs, a test harness, and the speed numbers (published 15-Oct-2026) Part II: Writing complex real-world AWS IAM policies (this post) Part III: Schrödinger postmortem root cause analysis (published 27-Oct-2026) Part IV: Letting a local model audit and fix a repo on its own […]
Consulting Brief: ParallelCluster Guardrails When Prod Is Shared

Update 17-Oct-2026: the client’s SCP now lets our ParallelCluster operator role delete CloudWatch alarms and dashboards, so our clusters run with monitoring on again. See the update section. TL;DR It is counterintuitive, but it is safer to let AWS ParallelCluster deploy itself with broad permissions than to hand it pre-made roles. When ParallelCluster creates its […]