TerraGoat is a deliberately vulnerable Terraform repository created by Bridgecrew that contains intentional cloud infrastructure misconfigurations. The tool serves as a training and testing environment for DevSecOps teams to understand common security issues in cloud deployments. It demonstrates various configuration errors that typically occur in production cloud environments across different cloud providers. TerraGoat enables security professionals to practice identifying and remediating infrastructure misconfigurations. The repository provides examples of vulnerable Terraform code that can be used to test policy-as-code frameworks and security scanning tools. The tool supports testing and validation of infrastructure security tools like Checkov and other static analysis solutions. It helps teams develop and refine their misconfiguration prevention strategies by providing realistic examples of problematic configurations. TerraGoat includes various types of cloud security misconfigurations spanning compute, storage, networking, and identity management services. The vulnerable configurations are designed to mirror real-world scenarios that security teams encounter in production environments.