Controllers are usually attached to an endpoint, is your goal to do all of this in one REST call or are you intentionally wanting to make 2 REST calls?
If the former is true, then you want one controller and you can build out two services that can be called in that controller (or skip the services and write it all into one controller).