How to grant web access to individual Windows apps?

Condition: the Windows Defender firewall is configured to block outgoing web connections by default.

What’s needed: allow some Windows apps (News, Weather, etc.) to access the Web.

Problem: the owner of the folder “C:\Program Files\WindowsApps” is TrustedInstaller and this folder is not viewable even with admin privileges. So one cannot find out the paths of app executables for specifying them in firewal rules.

Question: how to grant web access to individual Windows apps?

My guessing is that one needs to list the contents of “C:\Program Files\WindowsApps” folder somehow. But how can it be done?