Currently, the "Invalid Resource" error can occur during migration if, for example, you want to migrate a service that is located in a folder that requires a security zone and this security zone does not exist on the target.
In this scenario, the gateway will not recognise the security zone as a dependency and will not include it in the bundle.
At the moment, if you want to migrate a resource that belongs to a security zone that is unknown to the target, you have to select it additionally or migrate it beforehand.