Hide Access to config.json file in S3

I have a React application which is hosted in s3. In the s3 folder , there is a config.json file which has some of the env specific variables used in the code. Is there a way to remove this file from s3 and use any other approach as an alternative? The aim is to secure this file so that it is not available thorugh curl command. Currently when I try to use curl /static/config.json, it returns the contents of the config file.