10 Credential Revocation

Time to first impact

T+0 to 1s. first impact at 0.4s.

What was injected

Credential Revocation — nothing was injected: this is the worked example

What happened

db password rotated; api kept the old pool until restarted

Impact

Remediation

• Re-read a credential when it is refused rather than only at start, and back off on repeated refusals instead of retrying the revoked one.