CloudGoat is a vulnerable-by-design AWS deployment tool developed by Rhino Security Labs for cloud security training and skill development. The tool creates intentionally vulnerable AWS environments that simulate real-world cloud security scenarios through capture-the-flag style challenges. Users can deploy various AWS resources configured with security weaknesses to practice identifying and exploiting cloud misconfigurations. CloudGoat offers structured learning experiences with scenarios ranging from beginner to advanced difficulty levels. Each scenario provides multiple attack paths and solution approaches, allowing users to explore different exploitation techniques within controlled AWS environments. The tool includes comprehensive documentation and guidance to support the learning process. It enables security professionals, penetration testers, and students to develop practical cloud security skills by working with realistic vulnerable infrastructure deployments. CloudGoat scenarios cover various AWS services and common cloud security issues, providing hands-on experience with cloud penetration testing methodologies and attack vectors specific to Amazon Web Services environments.