English | 简体中文

HuaweiCloud Python Software Development Kit (Python SDK)

The HuaweiCloud Python SDK allows you to easily work with Huawei Cloud services such as Elastic Compute Service (ECS) and Virtual Private Cloud(VPC) without the need to handle API related tasks.

This document introduces how to obtain and use HuaweiCloud Python SDK.

Getting Started

• To use HuaweiCloud Python SDK, you must have Huawei Cloud account as well as the Access Key and Secret key of the HuaweiCloud account.

  The accessKey is required when initializing {Service}Client. You can create an AccessKey in the Huawei Cloud console. For more information, see My Credentials.

• HuaweiCloud Python SDK requires python 3 or later.

Install Python SDK

HuaweiCloud Python SDK supports Python 3 or later. Run python --version to check the version of Python.

You must install huaweicloudsdkcore library no matter which product/service development kit you need to use. Take using VPC SDK for example, you need to install huaweicloudsdkcore library and huaweicloudsdkvpc library:

• Use python pip

  Run the following command to install the individual libraries of HuaweiCloud services:

  # Install the core library
  pip install huaweicloudsdkcore
  
  # Install the VPC management library
  pip install huaweicloudsdkvpc
  

• Install from source

  Run the following command to install the individual libraries of HuaweiCloud services:

  # Install the core library
  cd huaweicloudsdkcore-${version}
  python setup.py install
  
  # Install the VPC management library
  cd huaweicloudsdkvpc-${version}
  python setup.py install
  

Use Python SDK

1. Import the required modules as follows:

   from huaweicloudsdkcore.auth.credentials import BasicCredentials, GlobalCredentials
   from huaweicloudsdkcore.exceptions import exceptions
   from huaweicloudsdkcore.http.http_config import HttpConfig
   # import specified service library huaweicloudsdk{service}, take vpc for example
   from huaweicloudsdkvpc.v2 import *
   # import specified service region file, take vpc for example
   from huaweicloudsdkvpc.v2.region.vpc_region import VpcRegion
   

2. Config {Service}Client Configurations

   2.1 Use default configuration

   #  Use default configuration
   config = HttpConfig.get_default_config()
   

   2.2 Proxy(Optional)

   # Use Proxy if needed
   config.proxy_protocol = 'http'
   config.proxy_host = 'proxy.huaweicloud.com'
   config.proxy_port = 80
   config.proxy_user = 'username'
   config.proxy_password = 'password'
   

   2.3 Connection(Optional)

   # seconds to wait for the server to send data before giving up, as a float, or (connect timeout, read timeout)
   config.timeout = 3
   

   2.4 SSL Certification(Optional)

   # Skip ssl certifaction checking while using https protocol if needed
   config.ignore_ssl_verification = True
   # Server ca certification if needed
   config.ssl_ca_cert = ssl_ca_cert
   

3. Initialize Credentials

   Notice: There are two types of HUAWEI CLOUD services, regional services and global services. Global services currently only support BSS, DevStar, EPS, IAM, RMS, TMS.

   For Regional services' authentication, projectId is required. For global services' authentication, domainId is required.

   If you use {Service}Region to initialize {Service}Client, projectId/domainId supports automatic acquisition, you don't need to configure it when initializing Credentials.

   • ak is the access key ID for your account.
   • sk is the secret access key for your account.
   • project_id is the ID of your project depending on your region which you want to operate.
   • domain_id is the account ID of HUAWEI CLOUD.
   • security_token is the security token when using temporary AK/SK.

   3.1 Use permanent AK/SK

   # Region services
   credentials = BasicCredentials(ak, sk, project_id)
   
   # Global services
   credentials = GlobalCredentials(ak, sk, domain_id)
   

   3.2 Use temporary AK/SK

   It's preferred to obtain temporary access key, security key and security token first, which could be obtained through permanent access key and security key or through an agency.

   Obtaining a temporary access key token through permanent access key and security key, you could refer to document: https://support.huaweicloud.com/en-us/api-iam/iam_04_0002.html . The API mentioned in the document above corresponds to the method of createTemporaryAccessKeyByToken in IAM SDK.

   Obtaining a temporary access key and security token through an agency, you could refer to document: https://support.huaweicloud.com/en-us/api-iam/iam_04_0101.html . The API mentioned in the document above corresponds to the method of createTemporaryAccessKeyByAgency in IAM SDK.

   # Region services
   credentials = BasicCredentials(ak, sk, project_id).with_security_token(security_token)
   
   # Global services
   credentials = GlobalCredentials(ak, sk, domain_id).with_security_token(security_token)
   

4. Initialize the {Service}Client instance (Two ways)

   There are two ways to initialize the instance of {Service}Client.

   4.1 Specify Endpoint when initializing {Service}Client

   # Initialize specified service client instance, take VpcClient for example
   client = VpcClient.new_builder() \
       .with_http_config(config) \
       .with_credentials(credentials) \
       .with_endpoint(endpoint) \
       .with_file_log(path="test.log", log_level=logging.INFO) \  # Write log files
       .with_stream_log(log_level=logging.INFO) \                 # Write log to console
       .build()
   

   where:

   • endpoint: service specific endpoints, see Regions and Endpoints.
   • with_file_log:
     • path: log file path.
     • log_level: log level, default is INFO.
     • max_bytes: size of single log file, default is 10485760 bytes.
     • backup_count: count of log file, default is 5.
   • with_stream_log:
     • stream: stream object, default is sys.stdout.
     • log_level: log level, default is INFO.

   After enabled log, the SDK will print the access log by default, every request will be recorded in console like: '%(asctime)s %(thread)d %(name)s %(filename)s %(lineno)d %(levelname)s %(message)s'

   2020-06-16 10:44:02,019 4568 HuaweiCloud-SDK http_handler.py 28 INFO "GET https://vpc.cn-north-1.myhuaweicloud.com/v1/0904f9e1f100d2932f94c01f9aa1cfd7/vpcs" 200 11 0:00:00.543430 b5c927ffdab8401e772e70aa49972037
   

   4.2 Specify Region when initializing {Service}Client (Recommended)

   # Initialize specified service client instance, take IamClient for example
   client = IamClient.new_builder() \
       .with_http_config(config) \
       .with_credentials(credentials) \
       .with_region(IamRegion.CN_NORTH_4) \
       .with_file_log(path="test.log", log_level=logging.INFO) \  # Write log files
       .with_stream_log(log_level=logging.INFO) \                 # Write log to console
       .build()
   

   where:

   • If you use {Service}Region to initialize {Service}Client, projectId/domainId supports automatic acquisition, you don't need to configure it when initializing Credentials.
   • Multiple ProjectId situation is not supported.

5. Send a request and print response.

   # Initialize a request and print response, take interface of ListVpcs for example
   request = ListVpcsRequest()
   response = client.list_vpcs(request)
   print(respones)
   

6. Exceptions

   Level 1	Notice	Level 2	Notice
   ConnectionException	Connection error	HostUnreachableException	Host is not reachable
   		SslHandShakeException	SSL certification error
   RequestTimeoutException	Request timeout	CallTimeoutException	timeout for single request
   		RetryOutageException	no response after retrying
   ServiceResponseException	service response error	ServerResponseException	server inner error, http status code: [500,]
   		ClientRequestException	invalid request, http status code: [400? 500)

   # handle exceptions
   try:
      request = ListVpcsRequest()
      response = client.list_vpcs(request)
   except exception.ServiceResponseException as e:
      print(e.status_code)
      print(e.request_id)
      print(e.error_code)
      print(e.error_msg)
   

7. Asynchronous Requests

   # Initialize asynchronous client, take VpcAsyncClient for example
   vpc_client = VpcAsyncClient.new_builder() \
       .with_http_config(config) \
       .with_credentials(credentials) \
       .with_endpoint(endpoint) \
       .build()
   
   # send asynchronous request
   request = ListVpcsRequest()
   response = client.list_vpcs_async(request)
   
   # get asynchronous response
   print(response.result())
   

8. Troubleshooting

   In some situation, you may need to debug your http requests, original http request and response information will be needed. The SDK provides a listener function to obtain the original encrypted http request and response information.

   Warning: The original http log can only be used in troubleshooting scenarios, please do not print the original http header or body in the production environment. The log content is not encrypted and may contain sensitive information such as the password of your ECS or the password of your IAM user account, etc. When the response body is binary content, the body will be printed as "***" without detailed information.

   def response_handler(**kwargs):
       logger = kwargs.get("logger")
       response = kwargs.get("response")
       request = response.request
   
       base = "> Request %s %s HTTP/1.1" % (request.method, request.path_url) + "\n"
       if len(request.headers) != 0:
           base = base + "> Headers:" + "\n"
           for each in request.headers:
               base = base + "    %s : %s" % (each, request.headers[each]) + "\n"
       base = base + "> Body: %s" % request.body + "\n\n"
   
       base = base + "< Response HTTP/1.1 %s " % response.status_code + "\n"
       if len(response.headers) != 0:
           base = base + "< Headers:" + "\n"
           for each in response.headers:
               base = base + "    %s : %s" % (each, response.headers[each],) + "\n"
       base = base + "< Body: %s" % response.content
       logger.debug(base)
   
   client = VpcClient.new_builder() \
       .with_http_config(config) \
       .with_credentials(credentials) \
       .with_endpoint(endpoint) \
       .with_file_log(path="test.log", log_level=logging.INFO) \
       .with_stream_log(log_level=logging.INFO) \
       .with_http_handler(HttpHandler().add_response_handler(response_handler)) \
       .build()
   

   where:

   HttpHandler supports add_request_handler and add_response_handler.

Code example

• The following example shows how to query a list of VPC in a specific region, you need to substitute your real {Service}Client for VpcClient in actual use.

• Substitute the values for {your ak string}, {your sk string}, {your endpoint string} and {your project id}.

  # coding: utf-8
  
  
  from huaweicloudsdkcore.auth.credentials import BasicCredentials
  from huaweicloudsdkcore.exceptions import exceptions
  from huaweicloudsdkcore.http.http_config import HttpConfig
  from huaweicloudsdkvpc.v2 import *
  
  
  def list_vpc(client):
      try:
          request = ListVpcsRequest()
          response = client.list_vpcs(request)
          print(response)
      except exceptions.ClientRequestException as e:
          print(e.status_code)
          print(e.request_id)
          print(e.error_code)
          print(e.error_msg)
  
  
  if __name__ == "__main__":
      ak = "{your ak string}"
      sk = "{your sk string}"
      endpoint = "{your endpoint}"
      project_id = "{your project id}"
  
      config = HttpConfig.get_default_config()
      config.ignore_ssl_verification = True
      credentials = BasicCredentials(ak, sk, project_id)
  
      vpc_client = VpcClient.new_builder() \
          .with_http_config(config) \
          .with_credentials(credentials) \
          .with_endpoint(endpoint) \
          .build()
  
      list_vpc(vpc_client)