Terragoat
A vulnerable-by-design Terraform repository for learning cloud security misconfigurations across AWS, Azure, and GCP.
What is Terragoat?
TerraGoat is a vulnerable-by-design Terraform repository created by Bridgecrew for cloud security training. It provides intentionally insecure infrastructure-as-code configurations across AWS, Azure, and GCP to demonstrate common security misconfigurations that can slip into production environments. The project helps DevSecOps teams learn how to identify and prevent these vulnerabilities through hands-on practice.
Cloud security engineers, DevSecOps practitioners, and infrastructure teams who need to understand and prevent common Terraform misconfigurations in multi-cloud environments.
TerraGoat offers a safe, controlled environment to practice cloud security testing without risking real infrastructure, with comprehensive multi-cloud coverage and real-world vulnerability patterns that mirror actual production misconfigurations.
Overview
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Use Cases
Best For
- Training teams on cloud security misconfigurations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
