Dynamic Credentials

Instead of storing long-lived database passwords, CoreLink generates short-lived credentials on demand. Each credential set is scoped to a specific database connection and automatically expires after the configured TTL. The system handles credential rotation transparently, cycling passwords without service interruption.

Supported engines include PostgreSQL, MySQL, and MongoDB. Each connection stores its configuration encrypted at rest using the same envelope encryption as secrets.

Key Configuration

• Database engine selection (PostgreSQL, MySQL, MongoDB)
• Credential TTL
• Max concurrent leases
• Rotation schedule