What's the best way to block application/web browser downloads through Group Policy?

CybersecuritySecurityGroup PolicyIT Admin

Trying to restrict browser-based downloads for a subset of machines on our domain without breaking legitimate business use. Group Policy Objects seem like the right tool but the exact settings for modern Chrome/Edge policies aren't well documented anywhere I've found.