Sucuri Firewall and Cloudflare CDN

we are using sucuri firewall and cloudflare dns. We are experiencing our DKIM shutdown via amazon ses and I assume we do not had something setup correctly. Should cloudflare cdn point to sucuri firewall? Is Cloudflare basic plan firewall enough to replace sucuri or is pro level needed?