Currently my code is

```
client = boto3.client('sdb')
query = 'SELECT * FROM `%s` WHERE "%s" = "%s"' % (domain, key, value)
response = client.select(SelectExpression = query)

```

The variable `key` and `value` is input by user, what are the best way to escape them in my above code?

Edit: What I concern is how to escape the fields such as we did in the past to prevent SQL injection, but now in SimpleDB