feat(novasample): updated readme, architecture diagram, fixed trivy vunlerabilities

Author: dinsajwa

samples/amazon-nova-samples/README.md

@@ -106,3 +106,11 @@ https://$CLOUDFRONT_URL/
 3. Commit your changes
 4. Push to the branch
 5. Create a Pull Request
+
+## Clean Up
+
+To clean up and remove all resources deployed by this solution:
+
+1. Follow the [backend cleanup instructions](backend/README.md#clean-up) to remove backend resources
+2. Delete any additional CloudWatch log groups created during testing
+3. Ensure all S3 buckets are emptied before deletion

samples/amazon-nova-samples/backend/Dockerfile

@@ -1,18 +1,24 @@
-FROM gradle:7.6-jdk21 AS build
+FROM gradle:8.6.0-jdk21 AS build
 
 WORKDIR /app
 COPY . .
 # Ensure we build a proper executable JAR with manifest
 RUN gradle build --no-daemon
 
-FROM openjdk:21-slim
+FROM eclipse-temurin:21.0.2_13-jre-jammy
 
 # Create a non-root user
 RUN groupadd -r appuser && useradd -r -g appuser appuser
 
 WORKDIR /app
 COPY --from=build /app/app/build/libs/*.jar app.jar
 
+# Update system packages to fix vulnerabilities
+RUN apt-get update && \
+    apt-get upgrade -y && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
 # Set environment variables
 ENV AWS_REGION=us-east-1
 ENV PORT=8080

samples/amazon-nova-samples/backend/README.md

@@ -233,3 +233,31 @@ artillery report report.json
 3. Document infrastructure changes
 4. Update load tests as needed
 5. Create detailed pull requests
+
+## Clean up
+
+Before destroying the stack, perform these cleanup steps in order:
+
+1. Remove all data from the Amazon Simple Storage Service (Amazon S3) buckets:
+   - Frontend static assets bucket
+   - Access logging bucket
+   - Any other S3 buckets created by the stack
+
+2. Delete CloudWatch logs:
+   - Navigate to CloudWatch in the AWS Console
+   - Find and delete the following log groups:
+     - `/aws/fargate/nova-sonic` (WebSocket server logs)
+     - `/aws/lambda/*` (any Lambda function logs)
+     - `/aws/cloudfront/*` (CloudFront access logs)
+     - Any other log groups created during testing
+
+3. Destroy the stack:
+   ```shell
+   cdk destroy
+   ```
+
+4. After stack deletion, verify:
+   - All CloudWatch log groups are deleted
+   - All S3 buckets are removed
+   - All ECR repositories are cleaned up
+   - No orphaned resources remain in your AWS account

samples/amazon-nova-samples/backend/app/build.gradle.kts

@@ -21,11 +21,11 @@ dependencies {
     implementation("software.amazon.awssdk:regions")
 
     // Jetty WebSocket dependencies
-    implementation("org.eclipse.jetty:jetty-server:11.0.15")
-    implementation("org.eclipse.jetty:jetty-servlet:11.0.15")
-    implementation("org.eclipse.jetty.websocket:websocket-jetty-server:11.0.15")
-    implementation("org.eclipse.jetty.websocket:websocket-jetty-client:11.0.15")
-    implementation("org.eclipse.jetty.websocket:websocket-jetty-api:11.0.15")
+    implementation("org.eclipse.jetty:jetty-server:11.0.16")
+    implementation("org.eclipse.jetty:jetty-servlet:11.0.16")
+    implementation("org.eclipse.jetty.websocket:websocket-jetty-server:11.0.16")
+    implementation("org.eclipse.jetty.websocket:websocket-jetty-client:11.0.16")
+    implementation("org.eclipse.jetty.websocket:websocket-jetty-api:11.0.16")
     implementation("jakarta.servlet:jakarta.servlet-api:6.0.0")
 
     // Jackson for JSON handling
@@ -52,7 +52,8 @@ dependencies {
 
     // Logging
     implementation("org.slf4j:slf4j-api:2.0.7")
-    implementation("ch.qos.logback:logback-classic:1.4.11")
+    implementation("ch.qos.logback:logback-classic:1.4.12")
+    implementation("ch.qos.logback:logback-core:1.4.12")
 
     // Testing
     testImplementation("org.junit.jupiter:junit-jupiter:5.9.2")