Model Binding Source in API Controllers

Understanding how [ApiController] infers binding sources for complex types in Web API actions.

In an ASP.NET Core controller decorated with [ApiController], you have the action: public IActionResult Create(ProductDto product). Where does the framework bind the 'product' parameter from by default?