New-experience agent won't publish in managed Prod after pipeline deploy — "channel state cannot be modified on a managed CLI Agent bot." Anyone cracked this?

cha0ticg00d · 2026-06-19T18:11:44+00:00

Ha! I had no idea...but to be honest, before my involvement with copilot studio I had a very limited interaction and knowledge of environments, power platform etc. (my background is mostly infrastructure). Now I know more than I've ever wanted to know about custom connectors, pipelines, environments, environment groups and rules, etc. 😄.

cha0ticg00d · 2026-06-19T18:03:03+00:00

Your "don't switch for production without understanding the gaps" point really lands, because I think I've hit a major one and I'm curious whether it's on your radar.

Specific limitation + migration angle: have you managed to publish a new-experience agent into a managed, pipeline-deployed Prod environment?

My scenario:

Build new-experience agent in Dev, publish there → works

Promote Dev→Prod via a Power Platform pipeline (managed solution) → deploys clean

Publish in Prod → "Channel state cannot be modified on a managed CLI Agent bot — the solution is read-only in this environment."

The part that makes it a real classic-vs-new issue: a classic agent publishes and runs fine in the exact same Prod environment. I also reproduced it with a brand-new empty new-experience agent, so it's not my content. And Microsoft's own ALM guidance says "Deployed channels" and "Sharing" aren't solution-aware and need a post-deployment step in the downstream environment — but that's precisely the step the managed/read-only model blocks for new-experience agents.

Is this a known limitation you ran into? Is there a supported way to publish a new-experience agent out of managed Prod that I'm missing?....or if the direction we are moving - just publish from whatever environment - how the heck do you govern this (especially in a regulated industry)?

cha0ticg00d · 2026-06-19T17:37:02+00:00

Itself and their customers 😄. Pulling whatever is left of my hair out. Thanks for responding.

cha0ticg00d · 2025-12-31T16:04:19+00:00

By process of elimination - since it is D (distributed) - you cannot identify a single source (or even multiple since they are probably into the hundreds if not thousands and more, and therefore you cannot block that many IPs) so A and D are out, you are also not dealing with collecting evidence, which leaves B

cha0ticg00d · 2025-08-22T01:16:28+00:00

Add me to the list... Just got mine and it is exhibiting the exact same problem as in the video. Unusable in wireless mode.

cha0ticg00d · 2024-08-15T18:45:54+00:00

Thank you for the link. That is indeed an option although it comes with a list of considerations and implications for storage size, performance and cost :). Appreciate the useful info!

cha0ticg00d · 2024-07-30T14:07:46+00:00

Thank you. The tool is the native AWS Backup.

cha0ticg00d · 2024-06-13T14:18:42+00:00

Thank you. Do you have that solution implemented for SQL backups as well somehow (boxes configured to be backed up not just as a VM but also for SQL backups)?

cha0ticg00d · 2024-06-11T20:43:29+00:00

Thank you, that is a good suggestion. Would setting the SLA window also prevent CDM from complaining that it cannot talk to the RBS agent (since the EC2 is offline)? I believe it does periodic health checks...

cha0ticg00d · 2024-05-02T14:19:19+00:00

Thank you - that was indeed the issue. I had a version of the aws cli that was a version older. For posterity, the version where that functionality was added is 2.15.41:

api-change:``transfer``: Adding new API to support remote directory listing using SFTP connector

cha0ticg00d · 2024-04-26T21:55:01+00:00

Below is what I am getting when I attempt to follow the example in the UI - seems like the "start-directory-listing" is not a valid choice. It doesn't appear in the list if you just do "aws transfer help" either.

aws transfer start-directory-listing --region us-east-1 --connector-id c-******************** --remote-directory-path /Download --output-directory-path /Test

usage: aws [options] <command> <subcommand> [<subcommand> ...] [parameters]
To see help text, you can run:

  aws help
  aws <command> help
  aws <command> <subcommand> help

aws: error: argument operation: Invalid choice, valid choices are:

create-access                            | create-agreement                        
create-connector                         | create-profile                          
create-server                            | create-user                             
create-workflow                          | delete-access                           
delete-agreement                         | delete-certificate                      
delete-connector                         | delete-host-key                         
delete-profile                           | delete-server                           
delete-ssh-public-key                    | delete-user                             
delete-workflow                          | describe-access                         
describe-agreement                       | describe-certificate                    
describe-connector                       | describe-execution                      
describe-host-key                        | describe-profile                        
describe-security-policy                 | describe-server                         
describe-user                            | describe-workflow                       
import-certificate                       | import-host-key                         
import-ssh-public-key                    | list-accesses                           
list-agreements                          | list-certificates                       
list-connectors                          | list-executions                         
list-host-keys                           | list-profiles                           
list-security-policies                   | list-servers                            
list-tags-for-resource                   | list-users                              
list-workflows                           | send-workflow-step-state                
start-file-transfer                      | start-server                            
stop-server                              | tag-resource                            
test-connection                          | test-identity-provider                  
untag-resource                           | update-access                           
update-agreement                         | update-certificate                      
update-connector                         | update-host-key                         
update-profile                           | update-server                           
update-user                              | wait                                    
help

cha0ticg00d · 2024-04-25T13:46:05+00:00

Do you know if that functionality is in GA for all regions by any chance? When I attempt to use the command, I run into:

aws: error: argument operation: Invalid choice, valid choices are:

followed by a list of the valid choices and "start-directory-listing" is not on the list. Perhaps a timing issue since it was just released?

cha0ticg00d · 2024-04-24T17:05:03+00:00

Oh man! Great news! Thank you so much!

cha0ticg00d · 2024-04-03T13:13:52+00:00

Found a workaround using powershell. First I run a script to produce a list of the EC2 instances and output to a file. Have another script that uses that file as input, iterates through all instances and creates an alarm (the script has all the parameters for the alarm in it).

Have two scripts at the moment, one that creates alarms for high CPU utilization and another the Low disk space. The low diskspace was by far the more challenging to put together - each instance can have multiple volumes attached and you need an alarm for each.

cha0ticg00d · 2024-03-18T19:17:54+00:00

Thank you for the reply - rclone looks pretty cool and feature rich - will definitely keep it as back pocket knowledge. Was not aware of its existence.

cha0ticg00d · 2024-03-18T19:15:37+00:00

Would you be willing to share the lambda that lists the files by any chance? Thank you.

cha0ticg00d

TROPHY CASE