This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 92%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Hi, is there a way to hide Config.json in Azure API Management ?
We find visiting config.json from APIM portal will expose following info.
Though the GUIDs of subscription and resources group are fake and cannot be accessed from this URL, we still want to know if there's a way to hide those information to avoid potential attack.
Thank you
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 33%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Hi @Lily ,
Following up to see if @Manu Philip answer helps. Do let us know if you have any queries.
Please ' Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.
Due to integration considerations, certain system file's properties can't be able to alter, including config.json
Reference here: api-management-howto-developer-portal-customize
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 85%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
Although the content cannot be altered, the config.json exposes the URL of the Management API and the Resource Name.
Is there a way to hide this information?
The reference-site does not mention the config.json anymore.