fix

Author: RitvikKapila

DynamoDbEncryption/dafny/DynamoDbEncryption/src/ConfigToInfo.dfy

@@ -146,10 +146,12 @@ module SearchConfigToInfo {
     var mpl :- mplR.MapFailure(e => AwsCryptographyMaterialProviders(e));
 
     //= specification/searchable-encryption/search-config.md#key-store-cache
-    //# For a [Single Key Store](#single-key-store-initialization) the [Entry Capacity](../../submodules/MaterialProviders/aws-encryption-sdk-specification/framework/cryptographic-materials-cache.md#entry-capacity)
-    //# MUST be 1
-    //# For a [Multi Key Store](#multi-key-store-initialization) the [Entry Capacity](../../submodules/MaterialProviders/aws-encryption-sdk-specification/framework/cryptographic-materials-cache.md#entry-capacity)
-    //# MUST be key store's max cache size.
+    //# For a Beacon Key Source a [CMC](../../submodules/MaterialProviders/aws-encryption-sdk-specification/framework/cryptographic-materials-cache.md)
+    //# MUST be created.
+    //# For a [Single Key Store](#single-key-store-initialization), either the customer provides a cache, or we create a cache that MUST have [Entry Capacity](../../submodules/MaterialProviders/aws-encryption-sdk-specification/framework/cryptographic-materials-cache.md#entry-capacity)
+    //# equal to 1.
+    //# For a [Multi Key Store](#multi-key-store-initialization), either the customer provides a cache, or we create a cache that MUST have [Entry Capacity](../../submodules/MaterialProviders/aws-encryption-sdk-specification/framework/cryptographic-materials-cache.md#entry-capacity)
+    //# equal to 1000.
     var cacheType : MPT.CacheType :=
       if config.multi? then
         if config.multi.cache.Some? then

DynamoDbEncryption/dafny/DynamoDbEncryption/src/SearchInfo.dfy

@@ -330,12 +330,12 @@ module SearchableEncryptionInfo {
       }
 
       //= specification/searchable-encryption/search-config.md#get-beacon-key-materials
-      //# If using a `Shared` cache across multiple Beacon Key Sources,
-      //# different Beacon Key Sources having the same `branchKey` can have different TTLs.
-      //# In such a case, the expiry time in the cache is set according to the Beacon Key Source that populated the cache.
+      //# If using a `Shared` cache across multiple [Beacon Key Sources](#beacon-key-source),
+      //# different [Beacon Key Sources](#beacon-key-source) having the same `branchKey` can have different TTLs.
+      //# In such a case, the expiry time in the cache is set according to the [Beacon Key Source](#beacon-key-source) that populated the cache.
       //# There MUST be a check (cacheEntryWithinLimits) to make sure that for the cache entry found, who's TTL has NOT expired,
       //# `time.now() - cacheEntryCreationTime <= ttlSeconds` is true and
-      //# valid for TTL of the Beacon Key Source getting the cache entry.
+      //# valid for TTL of the [Beacon Key Source](#beacon-key-source) getting the cache entry.
       //# If this is NOT true, then we MUST treat the cache entry as expired.
       if getCacheOutput.Failure? || !cacheEntryWithinLimits(
            creationTime := getCacheOutput.value.creationTime,

specification/searchable-encryption/search-config.md

@@ -407,9 +407,9 @@ while providing a Shared Cache to the [Beacon Key Source](#beacon-key-source).
 
 The resource suffixes for the Searchable Encryption is as follows:
 
-  ```
-  logicalKeyStoreName + NULL_BYTE + UTF8Encode(branchKeyId)
-  ```
+```
+logicalKeyStoreName + NULL_BYTE + UTF8Encode(branchKeyId)
+```
 
 The aforementioned 4 definitions ([Resource Identifier](#resource-identifier),
 [Scope Identifier](#scope-identifier), [Partition ID](#partition-id-1), and