How to safely allow connection from my droplet webserver to AWS RDS managed database?

Question

I am trying to understand how to safely allow a connection from my droplet web server (nginx/node/express/vue) to a managed RDS database from AWS using node\'s pg and expres