Multiple plugins in an API Proxy

Hi all, I’m new to Kong, just wanted to check if I am on the right path. If I have a single proxy which is required to do the following steps below, how can I line up these plugins so that it runs in order when I fire a request to this API? Are the configurations done in one single conf file?
1 - Basic auth
2 - Verify client credentials
3 - Request transformer (send data to my backend microservices)
4 - Generate access token