You have an Azure App Service web app WebApp1 and an Azure Front Door profile FDProfile1 that forwards requests for https://www.contoso.com to WebApp1. You need to ensure only requests matching https://www.contoso.com/users/* are forwarded to WebApp1. Which part of FDProfile1 should you change?

Routes in Azure Front Door define how requests are matched and forwarded to backend origins. By modifying the route associated with https://www.contoso.com, you can specify a URL path pattern, such as /users/, to ensure only requests matching that pattern are directed to WebApp1. The origin group defines the collection of backend origins (like WebApp1) but not the path-based routing logic. An endpoint is the public-facing entry point for Front Door, and while it's part of the overall configuration, it doesn't control specific URL path matching. The domain refers to the custom domain itself, not the path-based routing rules.