How to make sure original service is not exposed

1

I have a Laravel microservice and I was able to successfully add Kong in front of it. Everything is working including routes. The only issue is that the original localhost/api/test for example is still accessible. Is there a way to hide that behind the Kong authentication layer, or any other way that it is no longer accessible except via Kong? Thanks