For DNS, yes — and we will help you point it at us.
There is one setting to be careful with. Cloudflare in DNS-only mode simply answers name lookups; it never sees your traffic, and that is fine.
Cloudflare in proxy mode is different: it terminates TLS, which means it sees your traffic in the clear — including protected health information. That makes Cloudflare a business associate in their own right, and their standard plans do not include a BAA. So proxy mode should stay off in front of a site handling PHI.
Your DNS hosting is included with us on Route 53, inside the same AWS account and audit trail as everything else, which is why we usually suggest leaving it with us.
