Under "Allowing access to the database" theres: Click on “Add Rule.” For “Type,” choose “PostgreSQL,” and for “Source” choose “Anywhere.”

Would recommend not to do that. Create Security Group, add EB to it and allow that only.