Add PetClinic AI Agents to demo app (#147)

*Description of changes:*

Adds two specialized Pet Clinic AI agents built using Strands SDK and
deployed to AWS Bedrock AgentCore Runtime:

**Agents**:

- *Pet Clinic Agent*: General assistant handling appointments, clinic
info, and emergency contacts. Delegates nutrition queries to the
Nutrition Agent.

- *Nutrition Agent*: Specialized agent for pet nutrition
recommendations, diet guidelines, and feeding advice.

**Infrastructure**:

- CDK stacks for agent deployment with custom CloudFormation resources
(note: this is temporary as Bedrock AgentCore Runtime does not have CDK
infrastructure yet)

- Lambda traffic generator triggered every 2 minutes via EventBridge


**Custom CDK Resource** -

Create:
<img width="884" height="266" alt="image"
src="https://github.com/user-attachments/assets/5fb7fbd5-7a99-44b7-956c-df8e7f8ccb58"
/>

Delete:
<img width="648" height="76" alt="image"
src="https://github.com/user-attachments/assets/4c1808f3-b97d-4f6c-b014-f9e5fb4e3d6e"
/>


By submitting this pull request, I confirm that you can use, modify,
copy, and redistribute this contribution, under the terms of your
choice.

Author: liustve

.gitignore

@@ -11,6 +11,20 @@
 
 # python
 **/__pycache__/
+venv/
+.venv/
+env/
+.env
+
+# CDK
+cdk.out/
+*.assets.json
+*.template.json
+
+# Node.js
+node_modules/
+package-lock.json
+npm-debug.log*
 
 # Maven
 target/

README.md

@@ -168,3 +168,34 @@ The following instructions set up an ECS cluster with all services running in Fa
    ```
    cd scripts/ecs/appsignals/ && ./setup-ecs-demo.sh --operation=delete --region=region-name
    ```
+
+# Bedrock AgentCore Runtime Demo
+
+The following instructions set up AI agents deployed to Bedrock AgentCore Runtime. You can run these steps in your personal AWS account to follow along (Not recommended for production usage). 
+
+The setup includes:
+
+- **Primary Agent**: A general pet clinic assistant that handles appointment scheduling, clinic information, and emergency contacts. Any nutrition related queries will be delegated to the Nutrition Agent.
+- **Nutrition Agent**: A specialized agent focused on pet nutrition, diet recommendations, and feeding guidelines
+- **Traffic Generator**: A Lambda function scheduled via AWS EventBridge that sends queries to the Primary Agent every 1 minute.
+
+**Prerequisites:**
+- AWS CLI 2.x configured with appropriate permissions
+- AWS CDK >= v2.1024.0 installed
+- Node.js >= v18.0.0 installed
+- Docker installed and running (for building agent container images)
+- Access to Amazon Bedrock foundation models (Claude 3.5 Haiku recommended)
+
+## Setup Instructions
+
+1. **Deploy the agents and traffic generator**. Replace `region-name` with your desired AWS region (e.g., `us-east-1`):
+
+   ```shell
+   cd scripts/agents && ./setup-agents-demo.sh --region=region-name
+   ```
+
+2. **Clean up resources** when finished:
+
+   ```shell
+   cd scripts/agents && ./setup-agents-demo.sh --operation=delete --region=region-name
+   ```

cdk/agents/app.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+const cdk = require('aws-cdk-lib');
+const { PetClinicAgentsStack } = require('./lib/pet-clinic-agents-stack');
+const { PetClinicAgentsTrafficGeneratorStack } = require('./lib/pet-clinic-agents-traffic-generator-stack');
+
+const app = new cdk.App();
+
+// Deploy Pet Clinic agents
+const agentsStack = new PetClinicAgentsStack(app, 'PetClinicAgentsStack', {
+  env: {
+    account: process.env.CDK_DEFAULT_ACCOUNT,
+    region: process.env.CDK_DEFAULT_REGION,
+  },
+});
+
+// Deploy Pet Clinic agents traffic generator
+new PetClinicAgentsTrafficGeneratorStack(app, 'PetClinicAgentsTrafficGeneratorStack', {
+  env: {
+    account: process.env.CDK_DEFAULT_ACCOUNT,
+    region: process.env.CDK_DEFAULT_REGION,
+  },
+  primaryAgentArn: agentsStack.primaryAgentArn,
+  nutritionAgentArn: agentsStack.nutritionAgentArn,
+});
+
+app.synth();

cdk/agents/cdk.json

@@ -0,0 +1,63 @@
+{
+  "app": "node app.js",
+  "watch": {
+    "include": [
+      "**"
+    ],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  },
+  "context": {
+    "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+    "@aws-cdk/core:checkSecretUsage": true,
+    "@aws-cdk/core:target-partitions": [
+      "aws",
+      "aws-cn"
+    ],
+    "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+    "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+    "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+    "@aws-cdk/aws-iam:minimizePolicies": true,
+    "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+    "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+    "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+    "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+    "@aws-cdk/core:enablePartitionLiterals": true,
+    "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+    "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
+    "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+    "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+    "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+    "@aws-cdk/aws-route53-patters:useCertificate": true,
+    "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+    "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+    "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+    "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+    "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+    "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+    "@aws-cdk/aws-redshift:columnId": true,
+    "@aws-cdk/aws-stepfunctions-tasks:enableLogging": true,
+    "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+    "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+    "@aws-cdk/aws-kms:aliasNameRef": true,
+    "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+    "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+    "@aws-cdk/aws-efs:denyAnonymousAccess": true,
+    "@aws-cdk/aws-opensearchservice:enableLogging": true,
+    "@aws-cdk/aws-nordicapis-apigateway:authorizerChangeDeploymentLogicalId": true,
+    "@aws-cdk/aws-ec2:ebsDefaultGp3Volume": true,
+    "@aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount": true,
+    "@aws-cdk/aws-rds:preventRenderingDeprecatedCredentials": true,
+    "@aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForSourceAction": true
+  }
+}

cdk/agents/lambda/bedrock-agentcore-deployer/deployer.py

@@ -0,0 +1,137 @@
+import json
+import boto3
+from botocore.config import Config
+from urllib.request import urlopen, Request
+
+client = boto3.client('bedrock-agentcore-control', config=Config(retries={'max_attempts': 5, 'mode': 'standard'}))
+
+def handler(event, context):
+    print(f"Event: {json.dumps(event)}")
+    
+    request_type = event['RequestType']
+    properties = event['ResourceProperties']
+    
+    try:
+        if request_type == 'Create':
+            return create_agent(properties, event, context)
+        elif request_type == 'Update':
+            return update_agent(properties, event, context)
+        elif request_type == 'Delete':
+            return delete_agent(properties, event, context)
+    except Exception as e:
+        return send_response(event, context, 'FAILED', {'Error': str(e)})
+
+def create_agent(properties, event, context):
+    agent_name = properties['AgentName']
+    image_uri = properties['ImageUri']
+    execution_role = properties['ExecutionRole']
+    
+    try:
+        response = client.create_agent_runtime(
+            agentRuntimeName=agent_name,
+            description=f'{agent_name} agent for Application Signals demo',
+            agentRuntimeArtifact={
+                'containerConfiguration': {
+                    'containerUri': image_uri
+                }
+            },
+            roleArn=execution_role,
+            networkConfiguration={
+                'networkMode': 'PUBLIC'
+            },
+            protocolConfiguration={
+                'serverProtocol': 'HTTP'
+            }
+        )
+        
+        agent_arn = response['agentRuntimeArn']
+        
+        return send_response(event, context, 'SUCCESS', {
+            'AgentArn': agent_arn,
+            'AgentName': agent_name
+        }, agent_arn)
+        
+    except Exception as e:
+        print(f"Agent creation failed: {str(e)}")
+        raise e
+
+def update_agent(properties, event, context):
+    try:
+        physical_resource_id = event.get('PhysicalResourceId')
+        
+        if not physical_resource_id or physical_resource_id == event['LogicalResourceId']:
+            return send_response(event, context, 'FAILED', {'Error': 'No agent to update'})
+        
+        agent_runtime_id = physical_resource_id.split('/')[-1] if '/' in physical_resource_id else physical_resource_id.split(':')[-1]
+        
+        agent_name = properties['AgentName']
+        image_uri = properties['ImageUri']
+        execution_role = properties['ExecutionRole']
+        
+        response = client.update_agent_runtime(
+            agentRuntimeId=agent_runtime_id,
+            description=f'{agent_name} agent for Application Signals demo',
+            agentRuntimeArtifact={
+                'containerConfiguration': {
+                    'containerUri': image_uri
+                }
+            },
+            roleArn=execution_role,
+            networkConfiguration={
+                'networkMode': 'PUBLIC'
+            },
+            protocolConfiguration={
+                'serverProtocol': 'HTTP'
+            }
+        )
+        
+        agent_arn = response['agentRuntimeArn']
+        
+        return send_response(event, context, 'SUCCESS', {
+            'AgentArn': agent_arn,
+            'AgentName': agent_name
+        }, agent_arn)
+        
+    except Exception as e:
+        print(f"Agent update failed: {str(e)}")
+        return send_response(event, context, 'FAILED', {'Error': str(e)})
+
+def delete_agent(properties, event, context):
+    try:
+        physical_resource_id = event.get('PhysicalResourceId')
+        
+        if not physical_resource_id or physical_resource_id == event['LogicalResourceId']:
+            return send_response(event, context, 'SUCCESS', {})
+        
+        agent_runtime_id = physical_resource_id.split('/')[-1] if '/' in physical_resource_id else physical_resource_id.split(':')[-1]
+        client.delete_agent_runtime(agentRuntimeId=agent_runtime_id)
+        return send_response(event, context, 'SUCCESS', {})
+        
+    except Exception as e:
+        return send_response(event, context, 'FAILED', {'Error': str(e)})
+
+def send_response(event, context, status, data=None, physical_resource_id=None):
+    response_data = data or {}
+    
+    response_body = {
+        'Status': status,
+        'Reason': f'See CloudWatch Log Stream: {context.log_stream_name}',
+        'PhysicalResourceId': physical_resource_id or event.get('PhysicalResourceId', event['LogicalResourceId']),
+        'StackId': event['StackId'],
+        'RequestId': event['RequestId'],
+        'LogicalResourceId': event['LogicalResourceId'],
+        'Data': response_data
+    }
+    
+    response_url = event['ResponseURL']
+    json_response = json.dumps(response_body)
+    
+    headers = {
+        'content-type': '',
+        'content-length': str(len(json_response))
+    }
+    
+    req = Request(response_url, data=json_response.encode('utf-8'), headers=headers, method='PUT')
+    urlopen(req)
+    
+    return response_body

cdk/agents/lambda/bedrock-agentcore-deployer/requirements.txt

@@ -0,0 +1 @@
+boto3