Current ComplianceRemediation object: ocp4-cis-api-server-encryption-provider-cipher
enforces aescbc encryption. 

However, for several releases already, API server supports also AES-GCM, which is stronger and it is the default in vanilla kubernetes as well.

While the text of rule description is updated

When you enable etcd encryption, encryption keys are created. These keys are rotated on a weekly basis. You must have these keys in order to restore from an etcd backup.
To ensure the correct cipher, set the encryption type to aescbc or aesgcm in the apiserver object which configures the API server itself.