In an "out of the box" configuration, RDS PostgreSQL doesn't configure TLS in a safe way.
The server will allow non-TLS connections and most clients will not bother to validate the TLS certificates presented to it anyway.
But first...
Assuming that you have configured other security measures like VPC Security Groups