Restricting access to a client to only access certain URI and nothing else

I have a URI https://www-uat.corpoint.be/   and then i have this also https://www-uat.corpoint.be/rest/leads/callback*   On firewall we have allowed the public IP which resolve to this URI ...