capo-network-firewall: typed, async Python SDK for AWS Network Firewall

capo-network-firewall is a typed Python SDK for AWS Network Firewall. It has an async client, AsyncNetworkFirewallClient, for asyncio and trio, and a sync client, NetworkFirewallClient, with the same methods. Requests and responses are typed with TypedDicts, so your editor and type checker know every field.

It is part of capo, a community-driven alternative to boto3 and aioboto3, built on its own HTTP stack instead of botocore and generated from the official AWS Smithy models. Documentation: https://capo-sdk.dev/services/network-firewall/

Installation

pip install capo-network-firewall

Usage

from capo_network_firewall import AsyncNetworkFirewallClient


async def main():
    async with AsyncNetworkFirewallClient() as network_firewall:
        # Example: call the accept_network_firewall_transit_gateway_attachment operation
        response = await network_firewall.accept_network_firewall_transit_gateway_attachment()
        print(response["transit_gateway_attachment_id"])

Pagination

Some operations in this SDK support pagination. If the operation supports pagination it will have an iter_ prefixed method that returns an async iterator.

from capo_network_firewall import AsyncNetworkFirewallClient


async def main():
    async with AsyncNetworkFirewallClient() as network_firewall:
        # Example: paginate over get_analysis_report_results
        async for item in network_firewall.iter_get_analysis_report_results():
            print(item)

Error Handling

The SDK raises exceptions for errors returned by the API. Catch them to handle failures gracefully.

from capo_network_firewall import AsyncNetworkFirewallClient
from capo_network_firewall.error import InternalServerError


async def main():
    async with AsyncNetworkFirewallClient() as network_firewall:
        try:
            await network_firewall.accept_network_firewall_transit_gateway_attachment()
        except InternalServerError as e:
            print(f"Error: {e}")
            print(e.data)  # additional error data

Retrying

The SDK retries failed operations automatically. Retry behaviour follows the Smithy specification: errors are retried based on their is_retryable and is_throttling_error attributes. Throttling errors use a longer base delay. Network-level failures (connection errors and timeouts) are also retried. Non-retryable errors, such as client errors without the @retryable trait, are raised immediately without further attempts.

The number of attempts defaults to 3 and can be changed at the client level via retry_max_attempts, or per call via config_overrides.

from capo_network_firewall import AsyncNetworkFirewallClient


async def main():
    async with AsyncNetworkFirewallClient() as network_firewall:
        # Default: 3 attempts for every operation
        response = await network_firewall.accept_network_firewall_transit_gateway_attachment()

        # Override per operation
        response = await network_firewall.accept_network_firewall_transit_gateway_attachment(config_overrides={"retry_max_attempts": 5})

        # Disable retries for this call
        response = await network_firewall.accept_network_firewall_transit_gateway_attachment(config_overrides={"retry_max_attempts": 1})